Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: efivarfs: Rate limit statfs() handler Ravi reports that statfs() may be called by unprivileged users on the efivarfs mount point, which may result in a flood of calls to the QueryVariableInfo() runtime service. These calls are disproportionately costly on x86 systems where the variable store is backed by SMM, as each SMM entry requires a rendez-vous of all the CPUs. So rate limit the calls to QueryVariableInfo() at twice per second, and return the most recently obtained value for calls that are elided.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 115409cbb6a296d73702a62c54c5b1b11cb88b3d before 97d71ebee48cd1b29091762b3e5cca4f815dd84c; affected d86ff3333cb1d5f42d8898fb5fdb304e143c0237 before 3cd611c9f1dbcc116c8af5112e3c1783c8cde2ae; affected d86ff3333cb1d5f42d8898fb5fdb304e143c0237 before 8953bdd1b9c0e748d5408d3d0b8e7aeee5c9cd41; affected d86ff3333cb1d5f42d8898fb5fdb304e143c0237 before 92895a14329cc9533e2a74a265214f690ba3851a; affected d86ff3333cb1d5f42d8898fb5fdb304e143c0237 before 0dbc2e94b81df5a1264068b6ed3605c654b8afcb; affected d86ff3333cb1d5f42d8898fb5fdb304e143c0237 before b2326338dc683e8c1067c0cbf7a47986c4190902; affected 6.1.178 before 6.1.188 |
| Linux / Linux | affected 6.5; unaffected 0 before 6.5; unaffected 6.1.188 through 6.1.*; unaffected 6.6.157 through 6.6.*; unaffected 6.12.109 through 6.12.*; unaffected 6.18.50 through 6.18.*; unaffected 7.2.4 through 7.2.*; unaffected 7.3 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/97d71ebee48cd1b29091762b3e5cca4f815dd84c
- https://git.kernel.org/stable/c/3cd611c9f1dbcc116c8af5112e3c1783c8cde2ae
- https://git.kernel.org/stable/c/8953bdd1b9c0e748d5408d3d0b8e7aeee5c9cd41
- https://git.kernel.org/stable/c/92895a14329cc9533e2a74a265214f690ba3851a
- https://git.kernel.org/stable/c/0dbc2e94b81df5a1264068b6ed3605c654b8afcb
- https://git.kernel.org/stable/c/b2326338dc683e8c1067c0cbf7a47986c4190902