In the Linux kernel, the following vulnerability has been resolved:
efi: libstub: only free priv.runtime_map when allocated
priv.runtime_map is only allocated when efi_novamap is not set. Otherwise, it is an uninitialized value. In the error path, it is freed unconditionally. Avoid passing an uninitialized value to free_pool. Free priv.runtime_map only when it was allocated.
This bug was discovered and resolved using Coverity Static Analysis Security Testing (SAST) by Synopsys, Inc.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-livepatch-6.1.94-99.176Upgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-modules-extraUpgrade python3-perf-debuginfo | Feb 17, 2025 | Jun 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 21, 2024 |
| Suse | — | Upgrade kernel-rt_debug-vdsoUpgrade dtb-mediatekUpgrade kernel-devel-azureUpgrade kernel-symsUpgrade kernel-default-develUpgrade kernel-obs-qaUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade kernel-zfcpdumpUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-develUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade dlm-kmp-azureUpgrade gfs2-kmp-rtUpgrade dtb-amdUpgrade dtb-xilinxUpgrade kselftests-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade kernel-azure-livepatch-develUpgrade dtb-renesasUpgrade kernel-default-livepatch-develUpgrade dtb-armUpgrade kernel-debugUpgrade dtb-apmUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmallUpgrade dtb-hisiliconUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-develUpgrade cluster-md-kmp-azureUpgrade kernel-macrosUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-debug-develUpgrade kernel-sourceUpgrade kselftests-kmp-defaultUpgrade kernel-rt-livepatchUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-baseUpgrade kernel-azure-extraUpgrade dtb-alteraUpgrade dtb-qcomUpgrade dtb-appleUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade dtb-lgUpgrade reiserfs-kmp-rtUpgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-extraUpgrade kernel-azure-develUpgrade kernel-default-base-rebuildUpgrade dtb-caviumUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-exynosUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade dtb-amazonUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-azure-vdsoUpgrade dtb-socionextUpgrade dtb-rockchipUpgrade kernel-source-rtUpgrade kernel-default-vdsoUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azureUpgrade dlm-kmp-rtUpgrade dtb-freescaleUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-rtUpgrade kernel-azure-optionalUpgrade dtb-allwinnerUpgrade gfs2-kmp-azure | Jul 10, 2024 | Jun 21, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04aUpgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1013-nvidia | Sep 12, 2024 | Jun 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub