8 matches found
Astra Linux – Vulnerability in edk2
Existing checks in SmmEntryPoint will not catch underflow when calculating BufferSize...
CVE-2026-89604 efivarfs: Rate limit statfs() handler
In the Linux kernel, the following vulnerability has been resolved: efivarfs: Rate limit statfs handler Ravi reports that statfs may be called by unprivileged users on the efivarfs mount point, which may result in a flood of calls to the QueryVariableInfo runtime service. These calls are...
CVE-2026-89604 efivarfs: Rate limit statfs() handler
In the Linux kernel, the following vulnerability has been resolved: efivarfs: Rate limit statfs handler Ravi reports that statfs may be called by unprivileged users on the efivarfs mount point, which may result in a flood of calls to the QueryVariableInfo runtime service. These calls are...
CVE-2026-89604
CVE-2026-89604 affects the Linux kernel's efivarfs filesystem. Unprivileged users can repeatedly call statfs() on the efivarfs mount point, triggering a flood of calls to the QueryVariableInfo() UEFI runtime service. On x86 systems where the EFI variable store is backed by SMM (System Management ...
Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.
...
SUSE CVE-2021-38578
Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize...
OESA-2022-2122 edk2 security update
EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.CVE-2021-38578...