Threats tagged 'ghsa-9m7h-hjwm-6r7m'

A medium severity vulnerability (CVE-2024-33619) in the Linux kernel's EFI libstub component involves improper freeing of an uninitialized pointer priv.runtime_map. The issue occurs because priv.runtime_map is only allocated when efi_novamap is not set, but in an error path, it is freed unconditionally, potentially leading to undefined behavior or system instability. This vulnerability was identified and fixed through static analysis by Synopsys Coverity SAST.