8 matches found
Astra Linux – Vulnerability in edk2
Existing checks in SmmEntryPoint will not catch underflow when calculating BufferSize...
CVE-2026-89604 efivarfs: Rate limit statfs() handler
In the Linux kernel, the following vulnerability has been resolved: efivarfs: Rate limit statfs handler Ravi reports that statfs may be called by unprivileged users on the efivarfs mount point, which may result in a flood of calls to the QueryVariableInfo runtime service. These calls are...
CVE-2026-89604
CVE-2026-89604 affects the Linux kernel's efivarfs filesystem. Unprivileged users can repeatedly call statfs() on the efivarfs mount point, triggering a flood of calls to the QueryVariableInfo() UEFI runtime service. On x86 systems where the EFI variable store is backed by SMM (System Management ...
CVE-2026-89604 efivarfs: Rate limit statfs() handler
In the Linux kernel, the following vulnerability has been resolved: efivarfs: Rate limit statfs handler Ravi reports that statfs may be called by unprivileged users on the efivarfs mount point, which may result in a flood of calls to the QueryVariableInfo runtime service. These calls are...
Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.
...
SUSE CVE-2021-38578
Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize...
OESA-2022-2122 edk2 security update
EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.CVE-2021-38578...