Описание
An issue was discovered in the Linux kernel through 5.19.8. drivers/firmware/efi/capsule-loader.c has a race condition with a resultant use-after-free.
Ссылки
- PatchThird Party Advisory
- Mailing ListThird Party Advisory
- Mailing ListThird Party Advisory
- Third Party Advisory
- PatchThird Party Advisory
- Mailing ListThird Party Advisory
- Mailing ListThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 5.19.8 (включая)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Конфигурация 3
Одно из
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
EPSS
Процентиль: 4%
0.0002
Низкий
4.7 Medium
CVSS3
Дефекты
CWE-362
Связанные уязвимости
CVSS3: 4.7
ubuntu
почти 3 года назад
An issue was discovered in the Linux kernel through 5.19.8. drivers/firmware/efi/capsule-loader.c has a race condition with a resultant use-after-free.
CVSS3: 4.7
redhat
почти 3 года назад
An issue was discovered in the Linux kernel through 5.19.8. drivers/firmware/efi/capsule-loader.c has a race condition with a resultant use-after-free.
CVSS3: 4.7
debian
почти 3 года назад
An issue was discovered in the Linux kernel through 5.19.8. drivers/fi ...
CVSS3: 4.7
github
почти 3 года назад
An issue was discovered in the Linux kernel through 5.19.8. drivers/firmware/efi/capsule-loader.c has a race condition with a resultant use-after-free.
EPSS
Процентиль: 4%
0.0002
Низкий
4.7 Medium
CVSS3
Дефекты
CWE-362