Read Overflow Vulnerability in efi/libstub Package
Summary
GSD-2021-1000792: efi/libstub: prevent read overflow in find_file_option(). Affects Kernel versions >= 7a88a6227dc7f2e723bba11ece05e57bd8dce8e4, < e786eacbf323b632bd4e77fc0f5474b5a422e025. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The efi/libstub package is a component of the Linux Kernel, which is responsible for handling the Extensible Firmware Interface (EFI) boot stub. It provides functionality for loading and executing EFI binaries during the boot process. The package plays a critical role in the initialization of the Linux Kernel and ensures compatibility with EFI systems. However, a vulnerability has been discovered in the package that could potentially lead to a read overflow.
Vulnerability Detail
The vulnerability in the efi/libstub package arises from a read overflow in the find_file_option() function. This function is responsible for locating a specific file option within the EFI binary. By exploiting this vulnerability, an attacker could trigger a read overflow, potentially leading to memory corruption or arbitrary code execution. The impact and attack plausibility of this vulnerability have not been proven yet. The vulnerability was introduced in version v5.8 of the Linux Kernel and has been fixed in version v5.12.10.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a workaround, if updating the Linux Kernel is not immediately feasible, it is recommended to exercise caution when loading EFI binaries during the boot process. Ensure that only trusted and verified binaries are loaded to mitigate the risk of exploitation.
Conclusion
The read overflow vulnerability in the efi/libstub package of the Linux Kernel could potentially lead to memory corruption or arbitrary code execution. It is crucial to update the Linux Kernel to version v5.12.10 or later to mitigate this vulnerability. Regularly updating the Linux Kernel is essential to ensure the latest security fixes and enhancements are applied. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The efi/libstub package is a component of the Linux Kernel responsible for handling the EFI boot stub. It facilitates the loading and execution of EFI binaries during the boot process.
The impact of this vulnerability is not yet proven. However, if successfully exploited, it could lead to memory corruption or arbitrary code execution.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.12.10 or later, as it includes the necessary patch to prevent the read overflow.
As a workaround, exercise caution when loading EFI binaries during the boot process and ensure only trusted and verified binaries are used.
For more information about this vulnerability, refer to the provided references link in the vulnerability details section.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
