← CVE Intelligence

CVE-2024-35800

efi: fix panic in kdump kernel PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: efi: fix panic in kdump kernel Check if get_next_variable() is actually valid pointer before calling it. In kdump kernel this method is set to NULL that causes panic during the kexec-ed kernel boot. Tested with QEMU and OVMF firmware.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected a8901f331b8b7f95a7315d033a22bc84c8365f35 before b9d103aca85f082a343b222493f3cab1219aaaf4; affected bad267f9e18f8e9e628abd1811d2899b1735a4e1 before 9114ba9987506bcfbb454f6e68558d68cb1abbde; affected bad267f9e18f8e9e628abd1811d2899b1735a4e1 before 7784135f134c13af17d9ffb39a57db8500bc60ff; affected bad267f9e18f8e9e628abd1811d2899b1735a4e1 before 090d2b4515ade379cd592fbc8931344945978210; affected bad267f9e18f8e9e628abd1811d2899b1735a4e1 before 62b71cd73d41ddac6b1760402bbe8c4932e23531; affected 6.1.81 before 6.1.84
Linux / Linuxaffected 6.3; unaffected 0 before 6.3; unaffected 6.1.84 through 6.1.*; unaffected 6.6.24 through 6.6.*; unaffected 6.7.12 through 6.7.*; unaffected 6.8.3 through 6.8.*; unaffected 6.9 through *

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.