CVE-2026-89604

A flaw was found in the Linux kernel's efivarfs component. An unprivileged local user can exploit this by repeatedly calling the statfs handler on the efivarfs mount point. This action triggers a flood of calls to the QueryVariableInfo runtime service, which is particularly costly on x86 systems...

PT-2026-90320

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Unprivileged users can trigger a flood of calls to the QueryVariableInfo runtime service by calling the statfs function on the efivarfs mount point. On x86 systems where the variable sto...