Threats tagged 'ghsa-pmmg-3c8m-93q3'

A vulnerability in the Linux kernel's efivarfs filesystem allows unprivileged users to cause a flood of costly QueryVariableInfo() calls by repeatedly invoking statfs() on the efivarfs mount point. This can disproportionately impact x86 systems where the variable store is backed by System Management Mode (SMM), as each call requires synchronization of all CPUs. The issue has been addressed by rate limiting these calls to twice per second and returning cached results for additional calls within that interval.