In the Linux kernel, the following vulnerability has been resolved:
firmware: qcom: uefisecapp: fix efivars registration race
Since the conversion to using the TZ allocator, the efivars service is registered before the memory pool has been allocated, something which can lead to a NULL-pointer dereference in case of a racing EFI variable access.
Make sure that all resources have been set up before registering the efivars.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kernel-64kb-extraUpgrade kernel-azure-vdsoUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade kernel-docsUpgrade kernel-azure-develUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade kernel-default-vdsoUpgrade kernel-macrosUpgrade kernel-docs-htmlUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade kernel-default-livepatchUpgrade kernel-default-extraUpgrade kernel-default-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade kernel-azureUpgrade kernel-develUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-develUpgrade kernel-source-vanillaUpgrade kernel-source-azure | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1018-azureUpgrade linux-image-azure-6.11Upgrade linux-image-virtualUpgrade linux-image-genericUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-azureUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.11.0-1024-oemUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-azure-fde-6.11Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-gcp-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-lowlatency-6.11Upgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-realtimeUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-raspiUpgrade linux-image-awsUpgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-azure-fde-edgeUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-6.11.0-1017-oracle-64k | Jun 26, 2025 | Apr 3, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub