In the Linux kernel, the following vulnerability has been resolved:
firmware: qcom: uefisecapp: fix efivars registration race
Since the conversion to using the TZ allocator, the efivars service is registered before the memory pool has been allocated, something which can lead to a NULL-pointer dereference in case of a racing EFI variable access.
Make sure that all resources have been set up before registering the efivars.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade kernel-azure-develUpgrade kernel-64kb-extraUpgrade kernel-azure-vdsoUpgrade kernel-sourceUpgrade kernel-source-vanillaUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azureUpgrade kernel-develUpgrade kernel-default-livepatchUpgrade kernel-default-vdsoUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade kernel-docs-htmlUpgrade kernel-64kbUpgrade kernel-azure-extraUpgrade kernel-macros | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-azure-fde-6.11Upgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-awsUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-realtimeUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-lowlatency-6.11Upgrade linux-image-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-azure-fde-edgeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1018-azureUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-genericUpgrade linux-image-oracle-64kUpgrade linux-image-azure-6.11Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-lowlatency-hwe-24.04 | Jun 26, 2025 | Apr 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub