Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-89604

efivarfs: Rate limit statfs() handler

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: efivarfs: Rate limit statfs() handler Ravi reports that statfs() may be called by unprivileged users on the efivarfs mount point, which may result in a flood of calls to the QueryVariableInfo() runtime service. These calls are disproportionately costly on x86 systems where the variable store is backed by SMM, as each SMM entry requires a rendez-vous of all the CPUs. So rate limit the calls to QueryVariableInfo() at twice per second, and return the most recently obtained value for calls that are elided.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 115409cbb6a296d73702a62c54c5b1b11cb88b3d to < 97d71ebee48cd1b29091762b3e5cca4f815dd84caffected
  • d86ff3333cb1d5f42d8898fb5fdb304e143c0237 to < 3cd611c9f1dbcc116c8af5112e3c1783c8cde2aeaffected
  • d86ff3333cb1d5f42d8898fb5fdb304e143c0237 to < 8953bdd1b9c0e748d5408d3d0b8e7aeee5c9cd41affected
  • d86ff3333cb1d5f42d8898fb5fdb304e143c0237 to < 92895a14329cc9533e2a74a265214f690ba3851aaffected
  • d86ff3333cb1d5f42d8898fb5fdb304e143c0237 to < 0dbc2e94b81df5a1264068b6ed3605c654b8afcbaffected
  • d86ff3333cb1d5f42d8898fb5fdb304e143c0237 to < b2326338dc683e8c1067c0cbf7a47986c4190902affected
  • 6.1.178 to < 6.1.188affected

Linux Linux

Default version status: affected

  • 6.5affected
  • 0 to < 6.5unaffected
  • 6.1.188 to ≤ 6.1.*unaffected
  • 6.6.157 to ≤ 6.6.*unaffected
  • 6.12.109 to ≤ 6.12.*unaffected
  • 6.18.50 to ≤ 6.18.*unaffected
  • 7.2.4 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References