CVE-2024-33619
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
21/06/2024
Last modified:
21/06/2024
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
efi: libstub: only free priv.runtime_map when allocated<br />
<br />
priv.runtime_map is only allocated when efi_novamap is not set.<br />
Otherwise, it is an uninitialized value. In the error path, it is freed<br />
unconditionally. Avoid passing an uninitialized value to free_pool.<br />
Free priv.runtime_map only when it was allocated.<br />
<br />
This bug was discovered and resolved using Coverity Static Analysis<br />
Security Testing (SAST) by Synopsys, Inc.