Riskcovery

CVE-2024-26843

efi: runtime: Fix potential overflow of soft-reserved region size

State
Published
Severity
6.0 Medium
Published
Apr 17, 2024
Updated
May 11, 2026
Reserved
Feb 19, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

efi: runtime: Fix potential overflow of soft-reserved region size

md_size will have been narrowed if we have >= 4GB worth of pages in a soft-reserved region.

Scores

CVSSScoreVectorSource
3.16.0 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:HCISA-ADP

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 16993c0f0a43213e23666ea40e9163887f593ac7 to before 4fff3d735baea104017f2e3c245e27cdc79f2426Affected
  • 16993c0f0a43213e23666ea40e9163887f593ac7 to before 4aa36b62c3eaa869860bf78b1146e9f2b5f782a9Affected
  • 16993c0f0a43213e23666ea40e9163887f593ac7 to before 700c3f642c32721f246e09d3a9511acf40ae42beAffected
  • 16993c0f0a43213e23666ea40e9163887f593ac7 to before cf3d6813601fe496de7f023435e31bfffa74ae70Affected
  • 16993c0f0a43213e23666ea40e9163887f593ac7 to before 156cb12ffdcf33883304f0db645e1eadae712fe0Affected
  • 16993c0f0a43213e23666ea40e9163887f593ac7 to before de1034b38a346ef6be25fe8792f5d1e0684d5ff4Affected
LinuxLinux
  • 5.5Affected
  • before 5.5Not affected
  • 5.10.211 through 5.10.*Not affected
  • 5.15.150 through 5.15.*Not affected
  • 6.1.80 through 6.1.*Not affected
  • 6.6.19 through 6.6.*Not affected
  • 6.7.7 through 6.7.*Not affected
  • 6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.