In the Linux kernel, the following vulnerability has been resolved:
efi: libstub: only free priv.runtime_map when allocated
priv.runtime_map is only allocated when efi_novamap is not set. Otherwise, it is an uninitialized value. In the error path, it is freed unconditionally. Avoid passing an uninitialized value to free_pool. Free priv.runtime_map only when it was allocated.
This bug was discovered and resolved using Coverity Static Analysis Security Testing (SAST) by Synopsys, Inc.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.94-99.176Upgrade kernel-develUpgrade perf | Feb 17, 2025 | Jun 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 21, 2024 |
| Suse | — | Upgrade kernel-default-baseUpgrade dtb-caviumUpgrade dtb-appleUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-qcomUpgrade kernel-debug-vdsoUpgrade dtb-exynosUpgrade dtb-sprdUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade gfs2-kmp-azureUpgrade kernel-default-vdsoUpgrade dtb-freescaleUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-rtUpgrade kernel-azure-vdsoUpgrade kernel-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-64kbUpgrade dtb-marvellUpgrade kernel-rt-extraUpgrade dtb-nvidiaUpgrade dtb-lgUpgrade dtb-rockchipUpgrade dtb-socionextUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-source-rtUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-develUpgrade kernel-rt_debug-develUpgrade dlm-kmp-rtUpgrade dtb-broadcomUpgrade kernel-64kb-extraUpgrade kselftests-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-docs-htmlUpgrade dtb-alteraUpgrade kernel-rt-optionalUpgrade dtb-amazonUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade dtb-allwinnerUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-develUpgrade ocfs2-kmp-rtUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade dtb-armUpgrade kernel-kvmsmallUpgrade kernel-debugUpgrade dtb-apmUpgrade kernel-debug-develUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-64kbUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-sourceUpgrade kernel-rt-livepatchUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade dlm-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-default-develUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-rtUpgrade dtb-renesasUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade dtb-xilinxUpgrade dtb-amdUpgrade dtb-mediatekUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade kernel-64kb-optionalUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade kernel-default-extraUpgrade cluster-md-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-debug-livepatch-devel | Jul 10, 2024 | Jun 21, 2024 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-nvidia-64kUpgrade linux-image-gkeUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-virtualUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-6.8.0-1012-oem | Sep 12, 2024 | Jun 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub