CVE-2022-50433

CVE-2022-50433 : Linux kernel vulnerability in the EFI/ACPI SSDT handling. Amadeusz reported KASAN use-after-free caused by unconditional kfree() of the new ACPI table when loading SSDTs from variables. Root cause: memory freed on both success and failure, mishandling ACPI core load result. Fix: ...

SUSE CVE-2022-28737

There's a possible overflow in handleimage when shim tries to load and execute crafted EFI executables; The handleimage function takes into account the SizeOfRawData field from each section to be loaded. An attacker can leverage this to perform out-of-bound writes into memory. Arbitrary code...