Vulnerability of EFI components of the Linux operating system’s kernel, allowing a hacker to trigger a service failure

The vulnerability of EFI components in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability allows a perpetrator to cause service failures...

CVE-2025-2296

A flaw was found in EDK2 EFI Development Kit 2. This vulnerability allows an attacker to cause arbitrary command execution and impact Confidentiality, Integrity, and Availability via improper input validation by local access. Mitigation To reduce the risk by disabling direct-boot mode, ensuring a...

USN-7909-2 linux-intel-iot-realtime, linux-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S39...

EUVD-2025-93472

Protection mechanism failure in the UEFI firmware for the Slim Bootloader within firmware may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via...

kernel: efi: Do not import certificates from UEFI Secure Boot for T2 Macs

In the Linux kernel, the following vulnerability has been resolved: efi: Do not import certificates from UEFI Secure Boot for T2 Macs On Apple T2 Macs, when Linux attempts to read the db and dbx efi variables at early boot to load UEFI Secure Boot certificates, a page fault occurs in Apple firmwa...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989550)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989550 advisory. In the Linux kernel, the following vulnerability has been resolved: gsmi: fix null-deref in gsmigetvariable We can get EFI variables without fetching the attribute, ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989170)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989170 advisory. In the Linux kernel, the following vulnerability has been resolved: efi: fix potential NULL deref in efimemreservepersistent When iterating on a linked list, a resul...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989838)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989838 advisory. In the Linux kernel, the following vulnerability has been resolved: efi: runtime: Fix potential overflow of soft-reserved region size mdsize will have been narrowed ...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988708)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988708 advisory. In the Linux kernel, the following vulnerability has been resolved: efi: fix NULL-deref in init error path In cases where runtime services are not supported or have...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989537)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989537 advisory. In the Linux kernel, the following vulnerability has been resolved: efi: Do not import certificates from UEFI Secure Boot for T2 Macs On Apple T2 Macs, when Linux...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990220)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990220 advisory. In the Linux kernel, the following vulnerability has been resolved: efi: runtime: Fix potential overflow of soft-reserved region size mdsize will have been narrowed ...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: EFI: stmm: Fixed incorrect buffer allocation method The communication buffer allocated by setupmmhdr is later passed to teeshmregisterkernelbuf. This function expects those buffers to be contiguous pages, but setupmmhdr simply us...

EUVD-2022-54872

In the Linux kernel, the following vulnerability has been resolved: efi: Do not import certificates from UEFI Secure Boot for T2 Macs On Apple T2 Macs, when Linux attempts to read the db and dbx efi variables at early boot to load UEFI Secure Boot certificates, a page fault occurs in Apple firmwa...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987684)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987684 advisory. In the Linux kernel, the following vulnerability has been resolved: efi: fix potential NULL deref in efimemreservepersistent When iterating on a linked list, a resul...

Moderate: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: nfsd: don't ignore the return code of svcprocregister CVE-2025-22026 kernel: firmware: armscpi: Ensure scpiinfo is not assigned if the probe fails CVE-2022-50087 kernel: sunrpc: fix clien...

SUSE-SU-2025:20863-1 Security update for grub2

This update for grub2 fixes the following issues: - Fix error: /boot/grub2/x8664-efi/bli.mod not found bsc1231591 - Fix OOM error in loading loopback file bsc1230840 bsc1249140 - Update the patch to fix "SRK not matched" errors when unsealing the key bsc1232411 bsc1247242 Security fixes for 2024:...

USN-7801-3: Linux kernel (Oracle) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - x86 architecture; - Compute Acceleration Framework; - Bus devices; - AM...

USN-7801-3 linux-oracle-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - x86 architecture; - Compute Acceleration Framework; - Bus devices; - AM...

EUVD-2015-6967

Malware in sbrugna...

EUVD-2011-1774

Malware in sbrugna...