CVE-2024-35800

Published: May 17, 2024

Modified: May 23, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: efi: fix panic in kdump kernel Check if get_next_variable() is actually valid pointer before calling it. In kdump kernel this method is set to NULL that causes panic during the kexec-ed kernel boot. Tested with QEMU and OVMF firmware.

Vendor	Product	Versions
Linux	Linux	affected `a8901f331b8b7f95a7315d033a22bc84c8365f35 - < b9d103aca85f082a343b222493f3cab1219aaaf4` affected `bad267f9e18f8e9e628abd1811d2899b1735a4e1 - < 9114ba9987506bcfbb454f6e68558d68cb1abbde` affected `bad267f9e18f8e9e628abd1811d2899b1735a4e1 - < 7784135f134c13af17d9ffb39a57db8500bc60ff` affected `bad267f9e18f8e9e628abd1811d2899b1735a4e1 - < 090d2b4515ade379cd592fbc8931344945978210` affected `bad267f9e18f8e9e628abd1811d2899b1735a4e1 - < 62b71cd73d41ddac6b1760402bbe8c4932e23531` +1 more versions
Linux	Linux	affected `6.3` unaffected `0 - < 6.3` unaffected `6.1.84 - <= 6.1.` unaffected `6.6.24 - <= 6.6.` unaffected `6.7.12 - <= 6.7.*` +2 more versions

References

https://git.kernel.org/stable/c/b9d103aca85f082a343b222493f3cab1219aaaf4

https://git.kernel.org/stable/c/9114ba9987506bcfbb454f6e68558d68cb1abbde

https://git.kernel.org/stable/c/7784135f134c13af17d9ffb39a57db8500bc60ff

https://git.kernel.org/stable/c/090d2b4515ade379cd592fbc8931344945978210

https://git.kernel.org/stable/c/62b71cd73d41ddac6b1760402bbe8c4932e23531

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2024-35800

Description

Affected Products

References