Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-35800
HistoryMay 17, 2024 - 12:00 a.m.

CVE-2024-35800

2024-05-1700:00:00
ubuntu.com
ubuntu.com
2
linux kernel
efi
vulnerability
panic
kdump kernel
null pointer
get_next_variable
qemu
ovmf firmware

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.6%

In the Linux kernel, the following vulnerability has been resolved: efi:
fix panic in kdump kernel Check if get_next_variable() is actually valid
pointer before calling it. In kdump kernel this method is set to NULL that
causes panic during the kexec-ed kernel boot. Tested with QEMU and OVMF
firmware.

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.6%