Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-33619

efi: libstub: only free priv.runtime_map when allocated

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: efi: libstub: only free priv.runtime_map when allocated priv.runtime_map is only allocated when efi_novamap is not set. Otherwise, it is an uninitialized value. In the error path, it is freed unconditionally. Avoid passing an uninitialized value to free_pool. Free priv.runtime_map only when it was allocated. This bug was discovered and resolved using Coverity Static Analysis Security Testing (SAST) by Synopsys, Inc.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • f80d26043af91ceb5036c478101c015edb9e7630 to < b8938d6f570f010a1dcdbfed3e5b5d3258c2a908affected
  • f80d26043af91ceb5036c478101c015edb9e7630 to < 9dce01f386c9ce6990c0a83fa14b1c95330b037eaffected
  • f80d26043af91ceb5036c478101c015edb9e7630 to < 6ca67a5fe1c606d1fbe24c30a9fc0bdc43a18554affected
  • f80d26043af91ceb5036c478101c015edb9e7630 to < 4b2543f7e1e6b91cfc8dd1696e3cdf01c3ac8974affected

Linux Linux

Default version status: affected

  • 6.1affected
  • 0 to < 6.1unaffected
  • 6.1.93 to ≤ 6.1.*unaffected
  • 6.6.33 to ≤ 6.6.*unaffected
  • 6.9.4 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References