CVE-2024-35800

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2024-35800
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-35800.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-35800
Downstream
Related
Published
2024-05-17T13:23:10Z
Modified
2025-10-15T10:36:31.855395Z
Summary
efi: fix panic in kdump kernel
Details

In the Linux kernel, the following vulnerability has been resolved:

efi: fix panic in kdump kernel

Check if getnextvariable() is actually valid pointer before calling it. In kdump kernel this method is set to NULL that causes panic during the kexec-ed kernel boot.

Tested with QEMU and OVMF firmware.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
a8901f331b8b7f95a7315d033a22bc84c8365f35
Fixed
b9d103aca85f082a343b222493f3cab1219aaaf4
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
bad267f9e18f8e9e628abd1811d2899b1735a4e1
Fixed
9114ba9987506bcfbb454f6e68558d68cb1abbde
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
bad267f9e18f8e9e628abd1811d2899b1735a4e1
Fixed
7784135f134c13af17d9ffb39a57db8500bc60ff
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
bad267f9e18f8e9e628abd1811d2899b1735a4e1
Fixed
090d2b4515ade379cd592fbc8931344945978210
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
bad267f9e18f8e9e628abd1811d2899b1735a4e1
Fixed
62b71cd73d41ddac6b1760402bbe8c4932e23531

Affected versions

v6.*

v6.1.81
v6.1.82
v6.1.83
v6.2
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.23
v6.6.3
v6.6.4
v6.6.5
v6.6.6
v6.6.7
v6.6.8
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.7.1
v6.7.10
v6.7.11
v6.7.2
v6.7.3
v6.7.4
v6.7.5
v6.7.6
v6.7.7
v6.7.8
v6.7.9
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.8.1
v6.8.2

Database specific 

{
    "vanir_signatures": [
        {
            "deprecated": false,
            "signature_type": "Function",
            "target": {
                "file": "drivers/firmware/efi/efi.c",
                "function": "generic_ops_supported"
            },
            "signature_version": "v1",
            "digest": {
                "length": 232.0,
                "function_hash": "243245088622606710571756658739709734112"
            },
            "id": "CVE-2024-35800-256085d6",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7784135f134c13af17d9ffb39a57db8500bc60ff"
        },
        {
            "deprecated": false,
            "signature_type": "Function",
            "target": {
                "file": "drivers/firmware/efi/efi.c",
                "function": "generic_ops_supported"
            },
            "signature_version": "v1",
            "digest": {
                "length": 232.0,
                "function_hash": "243245088622606710571756658739709734112"
            },
            "id": "CVE-2024-35800-441c2d0b",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b9d103aca85f082a343b222493f3cab1219aaaf4"
        },
        {
            "deprecated": false,
            "signature_type": "Function",
            "target": {
                "file": "drivers/firmware/efi/efi.c",
                "function": "generic_ops_supported"
            },
            "signature_version": "v1",
            "digest": {
                "length": 232.0,
                "function_hash": "243245088622606710571756658739709734112"
            },
            "id": "CVE-2024-35800-47048828",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@62b71cd73d41ddac6b1760402bbe8c4932e23531"
        },
        {
            "deprecated": false,
            "signature_type": "Line",
            "target": {
                "file": "drivers/firmware/efi/efi.c"
            },
            "signature_version": "v1",
            "digest": {
                "line_hashes": [
                    "40438142774934925156310734754019589400",
                    "221745955189983372019810210540345160113",
                    "336627503964537248818105267904755260477"
                ],
                "threshold": 0.9
            },
            "id": "CVE-2024-35800-4c076561",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9114ba9987506bcfbb454f6e68558d68cb1abbde"
        },
        {
            "deprecated": false,
            "signature_type": "Line",
            "target": {
                "file": "drivers/firmware/efi/efi.c"
            },
            "signature_version": "v1",
            "digest": {
                "line_hashes": [
                    "40438142774934925156310734754019589400",
                    "221745955189983372019810210540345160113",
                    "336627503964537248818105267904755260477"
                ],
                "threshold": 0.9
            },
            "id": "CVE-2024-35800-5eb40673",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b9d103aca85f082a343b222493f3cab1219aaaf4"
        },
        {
            "deprecated": false,
            "signature_type": "Line",
            "target": {
                "file": "drivers/firmware/efi/efi.c"
            },
            "signature_version": "v1",
            "digest": {
                "line_hashes": [
                    "40438142774934925156310734754019589400",
                    "221745955189983372019810210540345160113",
                    "336627503964537248818105267904755260477"
                ],
                "threshold": 0.9
            },
            "id": "CVE-2024-35800-b15874ba",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7784135f134c13af17d9ffb39a57db8500bc60ff"
        },
        {
            "deprecated": false,
            "signature_type": "Line",
            "target": {
                "file": "drivers/firmware/efi/efi.c"
            },
            "signature_version": "v1",
            "digest": {
                "line_hashes": [
                    "40438142774934925156310734754019589400",
                    "221745955189983372019810210540345160113",
                    "336627503964537248818105267904755260477"
                ],
                "threshold": 0.9
            },
            "id": "CVE-2024-35800-bdd3ceda",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@090d2b4515ade379cd592fbc8931344945978210"
        },
        {
            "deprecated": false,
            "signature_type": "Function",
            "target": {
                "file": "drivers/firmware/efi/efi.c",
                "function": "generic_ops_supported"
            },
            "signature_version": "v1",
            "digest": {
                "length": 232.0,
                "function_hash": "243245088622606710571756658739709734112"
            },
            "id": "CVE-2024-35800-c5b5cbe9",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@090d2b4515ade379cd592fbc8931344945978210"
        },
        {
            "deprecated": false,
            "signature_type": "Function",
            "target": {
                "file": "drivers/firmware/efi/efi.c",
                "function": "generic_ops_supported"
            },
            "signature_version": "v1",
            "digest": {
                "length": 232.0,
                "function_hash": "243245088622606710571756658739709734112"
            },
            "id": "CVE-2024-35800-dae2de5e",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9114ba9987506bcfbb454f6e68558d68cb1abbde"
        },
        {
            "deprecated": false,
            "signature_type": "Line",
            "target": {
                "file": "drivers/firmware/efi/efi.c"
            },
            "signature_version": "v1",
            "digest": {
                "line_hashes": [
                    "40438142774934925156310734754019589400",
                    "221745955189983372019810210540345160113",
                    "336627503964537248818105267904755260477"
                ],
                "threshold": 0.9
            },
            "id": "CVE-2024-35800-dfbeeca4",
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@62b71cd73d41ddac6b1760402bbe8c4932e23531"
        }
    ]
}

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.1.84
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.24
Type
ECOSYSTEM
Events
Introduced
6.3.0
Fixed
6.7.12
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.8.3