Description
In the Linux kernel, the following vulnerability has been resolved:
efi: fix NULL-deref in init error path
In cases where runtime services are not supported or have been disabled, the runtime services workqueue will never have been allocated.
Do not try to destroy the workqueue unconditionally in the unlikely event that EFI initialisation fails to avoid dereferencing a NULL pointer.
Metrics
CVSS 3.1 5.5/10
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 2ff3c97b47521d6700cc6485c7935908dcd2c27c, < 585a0b2b3ae7903c6abee3087d09c69e955a7794; >= 5167f194da6947e19a3e970485ee3ccb44f7958d, < 5fcf75a8a4c3e7ee9122d143684083c9faf20452; >= 98086df8b70c06234a8f4290c46064e44dafa0ed, < 4ca71bc0e1995d15486cd7b60845602a28399cb5; >= 98086df8b70c06234a8f4290c46064e44dafa0ed, < e2ea55564229e4bea1474af15b111b3a3043b76f; >= 98086df8b70c06234a8f4290c46064e44dafa0ed, < adc96d30f6503d30dc68670c013716f1d9fcc747; >= 98086df8b70c06234a8f4290c46064e44dafa0ed, < 703c13fe3c9af557d312f5895ed6a5fda2711104; f591a42b8f9a9d20e01d0462f4f55d2176ac52ec; e6584124b9823151ef586d10dedf565ade50cea6; >= 4.19.142, < 4.19.270; >= 5.4.61, < 5.4.229; >= 5.7.18, < 5.8; >= 5.8.4, < 5.9 |
| Linux | Linux | 5.9 |
References
- https://git.kernel.org/stable/c/4ca71bc0e1995d15486cd7b60845602a28399cb5Patch
- https://git.kernel.org/stable/c/585a0b2b3ae7903c6abee3087d09c69e955a7794Patch
- https://git.kernel.org/stable/c/5fcf75a8a4c3e7ee9122d143684083c9faf20452Patch
- https://git.kernel.org/stable/c/703c13fe3c9af557d312f5895ed6a5fda2711104Patch
- https://git.kernel.org/stable/c/adc96d30f6503d30dc68670c013716f1d9fcc747Patch
- https://git.kernel.org/stable/c/e2ea55564229e4bea1474af15b111b3a3043b76fPatch
Timeline
- Published
- Aug 21, 2024
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed