SB2024070446 - Improper locking in Linux kernel efivarfs
Published: July 4, 2024 Updated: May 13, 2025
Security Bulletin ID
SB2024070446
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Improper locking (CVE-ID: CVE-2023-52681)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper locking within the efivarfs_init_fs_context() function in fs/efivarfs/super.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/ea6b597fcaca99562fa56a473bcbbbd79b40af03
- https://git.kernel.org/stable/c/48be1364dd387e375e1274b76af986cb8747be2c
- https://git.kernel.org/stable/c/92be3095c6ca1cdc46237839c6087555be9160e3
- https://git.kernel.org/stable/c/547713d502f7b4b8efccd409cff84d731a23853b
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.75
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.14
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.7.2
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.8