Riskcovery

CVE-2024-35800

efi: fix panic in kdump kernel

State
Published
Severity
Not scored
Published
May 17, 2024
Updated
May 23, 2026
Reserved
May 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

efi: fix panic in kdump kernel

Check if get_next_variable() is actually valid pointer before calling it. In kdump kernel this method is set to NULL that causes panic during the kexec-ed kernel boot.

Tested with QEMU and OVMF firmware.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • a8901f331b8b7f95a7315d033a22bc84c8365f35 to before b9d103aca85f082a343b222493f3cab1219aaaf4Affected
  • bad267f9e18f8e9e628abd1811d2899b1735a4e1 to before 9114ba9987506bcfbb454f6e68558d68cb1abbdeAffected
  • bad267f9e18f8e9e628abd1811d2899b1735a4e1 to before 7784135f134c13af17d9ffb39a57db8500bc60ffAffected
  • bad267f9e18f8e9e628abd1811d2899b1735a4e1 to before 090d2b4515ade379cd592fbc8931344945978210Affected
  • bad267f9e18f8e9e628abd1811d2899b1735a4e1 to before 62b71cd73d41ddac6b1760402bbe8c4932e23531Affected
  • 6.1.81 to before 6.1.84Affected
LinuxLinux
  • 6.3Affected
  • before 6.3Not affected
  • 6.1.84 through 6.1.*Not affected
  • 6.6.24 through 6.6.*Not affected
  • 6.7.12 through 6.7.*Not affected
  • 6.8.3 through 6.8.*Not affected
  • 6.9 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.