Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2024-35800

efi: fix panic in kdump kernel

Description

In the Linux kernel, the following vulnerability has been resolved: efi: fix panic in kdump kernel Check if get_next_variable() is actually valid pointer before calling it. In kdump kernel this method is set to NULL that causes panic during the kexec-ed kernel boot. Tested with QEMU and OVMF firmware.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a8901f331b8b7f95a7315d033a22bc84c8365f35 to < b9d103aca85f082a343b222493f3cab1219aaaf4affected
  • bad267f9e18f8e9e628abd1811d2899b1735a4e1 to < 9114ba9987506bcfbb454f6e68558d68cb1abbdeaffected
  • bad267f9e18f8e9e628abd1811d2899b1735a4e1 to < 7784135f134c13af17d9ffb39a57db8500bc60ffaffected
  • bad267f9e18f8e9e628abd1811d2899b1735a4e1 to < 090d2b4515ade379cd592fbc8931344945978210affected
  • bad267f9e18f8e9e628abd1811d2899b1735a4e1 to < 62b71cd73d41ddac6b1760402bbe8c4932e23531affected
  • 6.1.81 to < 6.1.84affected

Linux Linux

Default version status: affected

  • 6.3affected
  • 0 to < 6.3unaffected
  • 6.1.84 to ≤ 6.1.*unaffected
  • 6.6.24 to ≤ 6.6.*unaffected
  • 6.7.12 to ≤ 6.7.*unaffected
  • 6.8.3 to ≤ 6.8.*unaffected
  • 6.9 to ≤ *unaffected

References