EFIv2 Runtime Services Vulnerability in Linux Kernel
Summary
GSD-2022-1000184: efi: runtime: avoid EFIv2 runtime services on Apple x86 machines. Affects Kernel versions < b0f1cc093bc2493ac259c53766fd2b800e085807. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is a widely used open-source operating system kernel that serves as the foundation for various Linux distributions. It provides essential functionality for hardware abstraction, process management, memory management, and device drivers. The EFI (Extensible Firmware Interface) runtime services in the Linux Kernel allow the execution of code in the firmware environment after the operating system has booted. However, on Apple x86 machines, the usage of EFIv2 runtime services can introduce security vulnerabilities.
Vulnerability Detail
The EFIv2 runtime services vulnerability in the Linux Kernel affects Apple x86 machines. The vulnerability arises from the usage of EFIv2 runtime services, which can potentially be exploited by attackers to gain unauthorized access, execute arbitrary code, or perform other malicious activities. The impact and attack plausibility of this vulnerability have not been proven yet. It is important to note that this vulnerability has been fixed in Linux Kernel version v5.10.96 by commit b0f1cc093bc2493ac259c53766fd2b800e085807.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The EFIv2 runtime services vulnerability in the Linux Kernel on Apple x86 machines can potentially lead to unauthorized access and execution of arbitrary code. It is crucial to update the Linux Kernel to version v5.10.96 or later to mitigate this vulnerability. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The impact of this vulnerability can potentially allow attackers to gain unauthorized access, execute arbitrary code, or perform other malicious activities on Apple x86 machines.
No, the actual impact and attack plausibility of this vulnerability have not been proven yet.
This vulnerability has been fixed in Linux Kernel version v5.10.96 by commit b0f1cc093bc2493ac259c53766fd2b800e085807.
To update the Linux Kernel, clone the official Linux Kernel repository, navigate to the cloned directory, checkout the desired version using the commit hash mentioned above, and build/install the updated Kernel following the standard procedures for your distribution.
No specific workaround has been mentioned for this vulnerability. It is recommended to update the Linux Kernel to the fixed version.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
