In the Linux kernel, the following vulnerability has been resolved:
efi: fix potential NULL deref in efi_mem_reserve_persistent
When iterating on a linked list, a result of memremap is dereferenced without checking it for NULL.
This patch adds a check that falls back on allocating a new page in case memremap doesn't succeed.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
[ardb: return -ENOMEM instead of breaking out of the loop]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-livepatch-5.15.93-55.139Upgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.173-154.642Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade perf-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfo | May 22, 2025 | Mar 27, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.12-17.42Upgrade python3-perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel | Jun 11, 2025 | Mar 27, 2025 |
| Debian | — | Upgrade linux | Mar 31, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perf | Jul 1, 2025 | Mar 27, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 9, 2025 | Mar 27, 2025 |
| Ubuntu | — | Upgrade linux-gkeUpgrade linux-iotUpgrade linux-oracle-5.4Upgrade linux-kvmUpgrade linux-raspiUpgrade linux-lowlatency-hwe-5.15Upgrade linux-aws-5.4Upgrade linux-azure-5.4Upgrade linux-nvidia-tegra-5.15Upgrade linux-awsUpgrade linux-azureUpgrade linux-aws-5.15Upgrade linux-gcp-5.15Upgrade linux-riscv-5.15Upgrade linux-raspi-5.4Upgrade linux-gcpUpgrade linux-intel-iotg-5.15Upgrade linux-realtimeUpgrade linux-hwe-5.15Upgrade linux-bluefieldUpgrade linux-intel-iotgUpgrade linux-fipsUpgrade linux-gcp-fipsUpgrade linux-azure-fipsUpgrade linux-ibmUpgrade linux-nvidiaUpgrade linux-gcp-5.4Upgrade linux-aws-fipsUpgrade linux-hwe-5.4Upgrade linux-oracleUpgrade linux-xilinx-zynqmpUpgrade linux-intel-iot-realtimeUpgrade linux-lowlatencyUpgrade linux-gkeopUpgrade linux-oracle-5.15Upgrade linuxUpgrade linux-ibm-5.4Upgrade linux-azure-5.15 | Apr 1, 2025 | Mar 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub