What’s Vulnerable › Vulnerabilities

CVE-2024-35800: efi: fix panic in kdump kernel

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-17 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: efi: fix panic in kdump kernel Check if get_next_variable() is actually valid pointer before calling it. In kdump kernel this method is set to NULL that causes panic during the kexec-ed kernel boot. Tested with QEMU and OVMF firmware.

Affected products

• Linux kernel: from 6.1.81 before 6.1.84; from 6.3 before 6.6.24; from 6.7 before 6.7.12; from 6.8 before 6.8.3 — fixed in 6.1.84, 6.6.24, 6.7.12, 6.8.3

How to fix

Upgrade to a fixed version: Linux kernel 6.1.84, 6.6.24, 6.7.12, 6.8.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/090d2b4515ade379cd592fbc8931344945978210
• https://git.kernel.org/stable/c/62b71cd73d41ddac6b1760402bbe8c4932e23531
• https://git.kernel.org/stable/c/7784135f134c13af17d9ffb39a57db8500bc60ff
• https://git.kernel.org/stable/c/9114ba9987506bcfbb454f6e68558d68cb1abbde
• https://git.kernel.org/stable/c/b9d103aca85f082a343b222493f3cab1219aaaf4
• https://git.kernel.org/stable/c/090d2b4515ade379cd592fbc8931344945978210
• https://git.kernel.org/stable/c/62b71cd73d41ddac6b1760402bbe8c4932e23531
• https://git.kernel.org/stable/c/7784135f134c13af17d9ffb39a57db8500bc60ff
• https://git.kernel.org/stable/c/9114ba9987506bcfbb454f6e68558d68cb1abbde
• https://git.kernel.org/stable/c/b9d103aca85f082a343b222493f3cab1219aaaf4

Get alerted when CVE-2024-35800 or the next vulnerability affects your stack