In the Linux kernel, the following vulnerability has been resolved:
efi: stmm: Fix incorrect buffer allocation method
The communication buffer allocated by setup_mm_hdr() is later on passed to tee_shm_register_kernel_buf(). The latter expects those buffers to be contiguous pages, but setup_mm_hdr() just uses kmalloc(). That can cause various corruptions or BUGs, specifically since commit 9aec2fb0fd5e ("slab: allocate frozen pages"), though it was broken before as well.
Fix this by using alloc_pages_exact() instead of kmalloc().
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade kernel-default-optionalUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-default-livepatchUpgrade dtb-alteraUpgrade ocfs2-kmp-rtUpgrade kernel-64kbUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-apmUpgrade kernel-default-develUpgrade kernel-kvmsmallUpgrade kernel-rt-develUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade dtb-broadcomUpgrade kernel-rt-livepatchUpgrade dtb-lgUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-default-extraUpgrade dtb-xilinxUpgrade kernel-default-vdsoUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-sourceUpgrade dtb-amazonUpgrade kernel-symsUpgrade kernel-obs-qaUpgrade dlm-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade dtb-caviumUpgrade dtb-freescaleUpgrade dtb-qcomUpgrade kernel-source-vanillaUpgrade dtb-armUpgrade kernel-docs-htmlUpgrade dtb-appleUpgrade kernel-docsUpgrade dtb-sprdUpgrade dtb-marvellUpgrade dtb-socionextUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-default-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-mediatekUpgrade dtb-amdUpgrade kselftests-kmp-rtUpgrade dtb-renesasUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade dlm-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-rockchip | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-awsUpgrade linux-image-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1050-awsUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-ibmUpgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-xilinxUpgrade linux-image-fips-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-gkeUpgrade linux-image-aws-fipsUpgrade linux-image-generic-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-ibm-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-realtimeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-generic-64k-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-gcp-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-genericUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-azureUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-kvmUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-22.04dUpgrade linux-image-generic-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gke-64kUpgrade linux-image-gke-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-106-fipsUpgrade linux-image-xilinx-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-gcp | Mar 17, 2026 | Sep 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub