In the Linux kernel, the following vulnerability has been resolved:
efi: libstub: only free priv.runtime_map when allocated
priv.runtime_map is only allocated when efi_novamap is not set. Otherwise, it is an uninitialized value. In the error path, it is freed unconditionally. Avoid passing an uninitialized value to free_pool. Free priv.runtime_map only when it was allocated.
This bug was discovered and resolved using Coverity Static Analysis Security Testing (SAST) by Synopsys, Inc.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade kernel-livepatch-6.1.94-99.176Upgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-libbpfUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel | Feb 17, 2025 | Jun 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 21, 2024 |
| Suse | — | Upgrade gfs2-kmp-rtUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-debug-develUpgrade kernel-default-livepatch-develUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-rt-livepatchUpgrade kernel-sourceUpgrade kselftests-kmp-defaultUpgrade kernel-develUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-docsUpgrade cluster-md-kmp-rtUpgrade dtb-mediatekUpgrade kernel-default-develUpgrade kernel-azure-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade kernel-obs-qaUpgrade dlm-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-zfcpdumpUpgrade dtb-hisiliconUpgrade kernel-syms-rtUpgrade dlm-kmp-azureUpgrade dtb-apmUpgrade kernel-kvmsmallUpgrade dtb-armUpgrade kernel-64kb-develUpgrade ocfs2-kmp-azureUpgrade kernel-debugUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-azureUpgrade cluster-md-kmp-azureUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade kernel-64kbUpgrade dtb-amdUpgrade dtb-renesasUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-default-baseUpgrade kernel-azure-extraUpgrade kernel-azure-develUpgrade kernel-64kb-extraUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-source-azureUpgrade dtb-amazonUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-optionalUpgrade dtb-alteraUpgrade kernel-default-livepatchUpgrade dtb-qcomUpgrade dtb-appleUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azureUpgrade reiserfs-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade dtb-lgUpgrade dtb-exynosUpgrade dtb-caviumUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade dtb-marvellUpgrade dtb-socionextUpgrade dtb-nvidiaUpgrade kernel-default-vdsoUpgrade kernel-docs-htmlUpgrade dlm-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-rt_debugUpgrade gfs2-kmp-defaultUpgrade dtb-freescaleUpgrade dlm-kmp-rt | Jul 10, 2024 | Jun 21, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidiaUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-genericUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-nvidia-64k-6.8 | Sep 12, 2024 | Jun 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub