CVE-2025-21998

creationtimestamp| type| source ---|---|--- 2025-04-03 07:34:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10183 2025-04-03 11:03:15+00:00| seen| https://t.me/cvedetector/21958 2025-04-03 11:11:58+00:00| seen|...

CVE-2025-21998

CVE-2025-21998 : In the Linux kernel, the efivars service could race with memory pool allocation after the TZ allocator change, risking a NULL pointer dereference on racing EFI variable access. The fix ensures all resources are initialized before registering efivars (firmware: qcom: uefisecapp). ...

CVE-2025-21998

In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: uefisecapp: fix efivars registration race Since the conversion to using the TZ allocator, the efivars service is registered before the memory pool has been allocated, something which can lead to a NULL-pointer...