In the Linux kernel, the following vulnerability has been resolved:
efi: libstub: only free priv.runtime_map when allocated
priv.runtime_map is only allocated when efi_novamap is not set. Otherwise, it is an uninitialized value. In the error path, it is freed unconditionally. Avoid passing an uninitialized value to free_pool. Free priv.runtime_map only when it was allocated.
This bug was discovered and resolved using Coverity Static Analysis Security Testing (SAST) by Synopsys, Inc.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernel-develUpgrade kernel-livepatch-6.1.94-99.176Upgrade kernel-modules-extraUpgrade bpftoolUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernelUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | Jun 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 21, 2024 |
| Suse | — | Upgrade dtb-apmUpgrade kernel-debugUpgrade dlm-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade dtb-mediatekUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade dtb-renesasUpgrade kernel-syms-azureUpgrade kernel-debug-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-default-extraUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-syms-rtUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-sourceUpgrade kernel-docsUpgrade dtb-hisiliconUpgrade kernel-default-develUpgrade kernel-default-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-debug-develUpgrade kernel-rt-livepatchUpgrade dtb-amlogicUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-64kb-develUpgrade kernel-macrosUpgrade dtb-armUpgrade gfs2-kmp-64kbUpgrade kernel-rt-develUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-rtUpgrade kernel-rt-optionalUpgrade gfs2-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade dtb-rockchipUpgrade dtb-socionextUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-freescaleUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-alteraUpgrade dtb-marvellUpgrade kernel-rt-extraUpgrade kernel-rt_debug-develUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-baseUpgrade kernel-azure-develUpgrade kernel-64kb-extraUpgrade kernel-azure-extraUpgrade dtb-amazonUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade dtb-appleUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-qcomUpgrade kernel-azureUpgrade kernel-debug-vdsoUpgrade kernel-defaultUpgrade dtb-exynosUpgrade dtb-caviumUpgrade kernel-docs-htmlUpgrade kernel-rt_debugUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade dlm-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-sprdUpgrade dtb-lgUpgrade reiserfs-kmp-rtUpgrade kernel-source-vanillaUpgrade dtb-nvidia | Jul 10, 2024 | Jun 21, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-6.8.0-1010-gkeUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1015-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-45-genericUpgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-ibm-classicUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-awsUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-1013-nvidia-lowlatency | Sep 12, 2024 | Jun 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub