Debian: CVE-2024-33619: linux -- security update

Debian: CVE-2024-33619: linux -- security update

Severity

4

CVSS

(AV:L/AC:M/Au:N/C:P/I:P/A:P)

Published

06/21/2024

Created

07/31/2024

Added

07/30/2024

Modified

07/30/2024

Description

In the Linux kernel, the following vulnerability has been resolved: efi: libstub: only free priv.runtime_map when allocated priv.runtime_map is only allocated when efi_novamap is not set. Otherwise, it is an uninitialized value.In the error path, it is freed unconditionally.Avoid passing an uninitialized value to free_pool. Free priv.runtime_map only when it was allocated. This bug was discovered and resolved using Coverity Static Analysis Security Testing (SAST) by Synopsys, Inc.

Solution(s)

• debian-upgrade-linux

References

• https://attackerkb.com/topics/cve-2024-33619
• CVE - 2024-33619