CVE-2024-35800

Description

In the Linux kernel, the following vulnerability has been resolved:efi: fix panic in kdump kernelCheck if get_next_variable() is actually valid pointer beforecalling it. In kdump kernel this method is set to null that causespanic during the kexec-ed kernel boot.Tested with QEMU and OVMF firmware.

Risk Information

Base Score
5.5
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.016

Associated Vulnerability

VulnerabilityOS Platform
Linux kernel (USN-6816-1) linux-image-6.8.0-1006-ibm_6.8.0-1006.6_amd64.debLinux
Linux kernel (USN-6816-1) linux-image-6.8.0-35-generic_6.8.0-35.35+1_amd64.debLinux
Linux kernel (USN-6816-1) linux-image-6.8.0-35-lowlatency_6.8.0-35.35.1_amd64.debLinux
Linux kernel (USN-6816-1) linux-image-generic_6.8.0-35.35_amd64.debLinux
Linux kernel (USN-6816-1) linux-image-generic-hwe-24.04_6.8.0-35.35_amd64.debLinux
Linux kernel (USN-6816-1) linux-image-ibm_6.8.0-1006.6_amd64.debLinux
Linux kernel (USN-6816-1) linux-image-ibm-classic_6.8.0-1006.6_amd64.debLinux
Linux kernel (USN-6816-1) linux-image-ibm-lts-24.04_6.8.0-1006.6_amd64.debLinux
Linux kernel (USN-6816-1) linux-image-kvm_6.8.0-35.35_amd64.debLinux
Linux kernel (USN-6816-1) linux-image-lowlatency_6.8.0-35.35.1_amd64.debLinux
Linux kernel (USN-6816-1) linux-image-virtual_6.8.0-35.35_amd64.debLinux
Linux kernel (USN-6816-1) linux-image-virtual-hwe-24.04_6.8.0-35.35_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-6817-1) linux-image-6.8.0-1008-gcp_6.8.0-1008.9_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-6817-1) linux-image-6.8.0-1009-aws_6.8.0-1009.9_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-6817-1) linux-image-aws_6.8.0-1009.9_amd64.debLinux
Linux kernel for Amazon Web Services (AWS) systems (USN-6817-1) linux-image-gcp_6.8.0-1008.9_amd64.debLinux
Linux kernel for OEM systems (USN-6817-2) linux-image-6.8.0-1006-oem_6.8.0-1006.6_amd64.debLinux
Linux kernel for OEM systems (USN-6817-2) linux-image-oem-24.04_6.8.0-1006.6+1_amd64.debLinux
Linux kernel for OEM systems (USN-6817-2) linux-image-oem-24.04a_6.8.0-1006.6+1_amd64.debLinux
Linux kernel for Microsoft Azure Cloud systems (USN-6817-3) linux-image-6.8.0-1004-gke_6.8.0-1004.7_amd64.debLinux
Linux kernel for Microsoft Azure Cloud systems (USN-6817-3) linux-image-6.8.0-1008-azure_6.8.0-1008.8_amd64.debLinux
Linux kernel for Microsoft Azure Cloud systems (USN-6817-3) linux-image-6.8.0-1008-azure-fde_6.8.0-1008.8_amd64.debLinux
Linux kernel for Microsoft Azure Cloud systems (USN-6817-3) linux-image-azure_6.8.0-1008.8_amd64.debLinux
Linux kernel for Microsoft Azure Cloud systems (USN-6817-3) linux-image-azure-fde_6.8.0-1008.8_amd64.debLinux
Linux kernel for Microsoft Azure Cloud systems (USN-6817-3) linux-image-gke_6.8.0-1004.7_amd64.debLinux
openssl update (TU-CESAS-0005) openssl-perl-3.2.2-2.el9.x86_64.rpmLinux
openssl update (TU-CESAS-0005) openssl-devel-3.2.2-2.el9.x86_64.rpmLinux
openssl update (TU-CESAS-0005) openssl-devel-3.2.2-2.el9.i686.rpmLinux
kernel update (TU-CESAS-0005) kernel-uki-virt-5.14.0-467.el9.x86_64.rpmLinux
kernel update (TU-CESAS-0005) kernel-tools-libs-5.14.0-467.el9.x86_64.rpmLinux
kernel update (TU-CESAS-0005) kernel-tools-5.14.0-467.el9.x86_64.rpmLinux
kernel update (TU-CESAS-0005) kernel-modules-extra-5.14.0-467.el9.x86_64.rpmLinux
kernel update (TU-CESAS-0005) kernel-modules-core-5.14.0-467.el9.x86_64.rpmLinux
kernel update (TU-CESAS-0005) kernel-modules-5.14.0-467.el9.x86_64.rpmLinux
kernel update (TU-CESAS-0005) kernel-headers-5.14.0-467.el9.x86_64.rpmLinux
kernel update (TU-CESAS-0005) kernel-doc-5.14.0-467.el9.noarch.rpmLinux
kernel update (TU-CESAS-0005) kernel-devel-matched-5.14.0-467.el9.x86_64.rpmLinux
kernel update (TU-CESAS-0005) kernel-devel-5.14.0-467.el9.x86_64.rpmLinux
kernel update (TU-CESAS-0005) kernel-debug-uki-virt-5.14.0-467.el9.x86_64.rpmLinux
kernel update (TU-CESAS-0005) kernel-debug-modules-extra-5.14.0-467.el9.x86_64.rpmLinux
kernel update (TU-CESAS-0005) kernel-debug-modules-core-5.14.0-467.el9.x86_64.rpmLinux
kernel update (TU-CESAS-0005) kernel-debug-devel-matched-5.14.0-467.el9.x86_64.rpmLinux
kernel update (TU-CESAS-0005) kernel-debug-devel-5.14.0-467.el9.x86_64.rpmLinux
kernel update (TU-CESAS-0005) kernel-debug-5.14.0-467.el9.x86_64.rpmLinux
kernel update (TU-CESAS-0005) kernel-5.14.0-467.el9.x86_64.rpmLinux
python3 update (TU-CESAS-0006) python3-perf-5.14.0-467.el9.x86_64.rpmLinux
openssl update (TU-CESAS-0006) openssl-libs-3.2.2-2.el9.x86_64.rpmLinux
openssl update (TU-CESAS-0006) openssl-libs-3.2.2-2.el9.i686.rpmLinux
openssl update (TU-CESAS-0006) openssl-3.2.2-2.el9.x86_64.rpmLinux
kernel update (TU-CESAS-0006) kernel-debug-modules-5.14.0-467.el9.x86_64.rpmLinux
kernel update (TU-CESAS-0006) kernel-debug-core-5.14.0-467.el9.x86_64.rpmLinux
kernel update (TU-CESAS-0006) kernel-core-5.14.0-467.el9.x86_64.rpmLinux
kernel update (TU-CESAS-0006) kernel-abi-stablelists-5.14.0-467.el9.noarch.rpmLinux
Linux kernel for Oracle Cloud systems (USN-6878-1) linux-image-6.8.0-1006-oracle_6.8.0-1006.6_amd64.debLinux
Linux kernel for Oracle Cloud systems (USN-6878-1) linux-image-oracle_6.8.0-1006.6_amd64.debLinux
(RHSA-2024:5363)Important: security update rv-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update rtla-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update python3-perf-debuginfo-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update python3-perf-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update perf-debuginfo-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update perf-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update libperf-debuginfo-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update kernel-uki-virt-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update kernel-tools-libs-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update kernel-tools-debuginfo-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update kernel-tools-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update kernel-rt-debuginfo-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update kernel-rt-debug-debuginfo-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update kernel-modules-extra-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update kernel-modules-core-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update kernel-modules-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update kernel-headers-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update kernel-doc-5.14.0-427.31.1.el9_4.noarch.rpmLinux
(RHSA-2024:5363)Important: security update kernel-devel-matched-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update kernel-devel-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update kernel-debuginfo-common-x86_64-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update kernel-debuginfo-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update kernel-debug-uki-virt-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update kernel-debug-modules-extra-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update kernel-debug-modules-core-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update kernel-debug-modules-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update kernel-debug-devel-matched-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update kernel-debug-devel-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update kernel-debug-debuginfo-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update kernel-debug-core-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update kernel-debug-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update kernel-core-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update kernel-abi-stablelists-5.14.0-427.31.1.el9_4.noarch.rpmLinux
(RHSA-2024:5363)Important: security update kernel-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update bpftool-debuginfo-7.3.0-427.31.1.el9_4.x86_64.rpmLinux
(RHSA-2024:5363)Important: security update bpftool-7.3.0-427.31.1.el9_4.x86_64.rpmLinux
Bpftool update (ELSA-2024-5363) bpftool-7.3.0-427.31.1.el9_4.x86_64.rpmLinux
Kernel-abi-stablelists update (ELSA-2024-5363) kernel-abi-stablelists-5.14.0-427.31.1.el9_4.noarch.rpmLinux
Kernel-core update (ELSA-2024-5363) kernel-core-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
Kernel-debug update (ELSA-2024-5363) kernel-debug-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
Kernel-debug-core update (ELSA-2024-5363) kernel-debug-core-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
Kernel-debug-devel update (ELSA-2024-5363) kernel-debug-devel-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
Kernel-debug-devel-matched update (ELSA-2024-5363) kernel-debug-devel-matched-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
Kernel-debug-modules update (ELSA-2024-5363) kernel-debug-modules-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
Kernel-debug-modules-core update (ELSA-2024-5363) kernel-debug-modules-core-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
Kernel-debug-modules-extra update (ELSA-2024-5363) kernel-debug-modules-extra-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
Kernel-debug-uki-virt update (ELSA-2024-5363) kernel-debug-uki-virt-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
Kernel-devel update (ELSA-2024-5363) kernel-devel-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
Kernel-devel-matched update (ELSA-2024-5363) kernel-devel-matched-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
Kernel-doc update (ELSA-2024-5363) kernel-doc-5.14.0-427.31.1.el9_4.noarch.rpmLinux
Kernel-headers update (ELSA-2024-5363) kernel-headers-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
Kernel-modules update (ELSA-2024-5363) kernel-modules-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
Kernel-modules-core update (ELSA-2024-5363) kernel-modules-core-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
Kernel-modules-extra update (ELSA-2024-5363) kernel-modules-extra-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
Kernel-tools update (ELSA-2024-5363) kernel-tools-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
Kernel-tools-libs update (ELSA-2024-5363) kernel-tools-libs-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
Kernel-uki-virt update (ELSA-2024-5363) kernel-uki-virt-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
Perf update (ELSA-2024-5363) perf-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
Python3-perf update (ELSA-2024-5363) python3-perf-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
Rtla update (ELSA-2024-5363) rtla-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
Rv update (ELSA-2024-5363) rv-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
Kernel update (ELSA-2024-5363) kernel-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
kernel security update (RLSA-2024:5363) kernel-debug-devel-matched-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
kernel security update (RLSA-2024:5363) kernel-modules-extra-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
kernel security update (RLSA-2024:5363) python3-perf-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
kernel security update (RLSA-2024:5363) kernel-debug-modules-core-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
kernel security update (RLSA-2024:5363) kernel-debug-modules-extra-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
kernel security update (RLSA-2024:5363) perf-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
kernel security update (RLSA-2024:5363) kernel-debug-uki-virt-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
kernel security update (RLSA-2024:5363) kernel-debug-devel-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
kernel security update (RLSA-2024:5363) kernel-devel-matched-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
kernel security update (RLSA-2024:5363) kernel-doc-5.14.0-427.31.1.el9_4.noarch.rpmLinux
kernel security update (RLSA-2024:5363) kernel-headers-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
kernel security update (RLSA-2024:5363) kernel-modules-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
kernel security update (RLSA-2024:5363) kernel-modules-core-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
kernel security update (RLSA-2024:5363) kernel-uki-virt-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
kernel security update (RLSA-2024:5363) kernel-tools-libs-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
kernel security update (RLSA-2024:5363) kernel-tools-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
kernel security update (RLSA-2024:5363) kernel-devel-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
kernel security update (RLSA-2024:5363) kernel-debug-core-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
kernel security update (RLSA-2024:5363) kernel-debug-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
kernel security update (RLSA-2024:5363) kernel-core-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
kernel security update (RLSA-2024:5363) kernel-abi-stablelists-5.14.0-427.31.1.el9_4.noarch.rpmLinux
kernel security update (RLSA-2024:5363) kernel-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
kernel security update (RLSA-2024:5363) bpftool-7.3.0-427.31.1.el9_4.x86_64.rpmLinux
kernel security update (RLSA-2024:5363) rv-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
kernel security update (RLSA-2024:5363) rtla-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
kernel security update (RLSA-2024:5363) kernel-debug-modules-5.14.0-427.31.1.el9_4.x86_64.rpmLinux
kernel Security Update (ALAS2023-2024-696) kernel-livepatch-6.1.84-99.169-1.0-0.amzn2023.x86_64.rpmLinux
NULL Pointer Dereference Vulnerability (CVE-2024-35800)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234