EFI Runtime Services Vulnerability in Linux Kernel
Summary
GSD-2022-1000605: efi: runtime: avoid EFIv2 runtime services on Apple x86 machines. Affects Kernel versions < a4085859411c825c321c9b55b8a9dc5a128a6684. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux Kernel is a critical component of the Linux operating system, responsible for managing system resources and providing an interface between hardware and software. It is widely used in various Linux distributions and powers a significant portion of the computing infrastructure worldwide. The EFI (Extensible Firmware Interface) runtime services are a set of functions provided by the firmware of a computer system, allowing software to interact with the system's firmware during runtime. These services are essential for various system operations, including power management, device configuration, and system initialization. However, a vulnerability has been discovered in the EFIv2 runtime services on Apple x86 machines, which could potentially be exploited by attackers to compromise the system's security.
Vulnerability Detail
The vulnerability in the EFIv2 runtime services on Apple x86 machines poses a security risk to the Linux Kernel. Although the impact and attack plausibility have not been proven, it is crucial to address this vulnerability to prevent potential exploitation. The vulnerability is fixed in Linux Kernel version v5.16.5 by commit a4085859411c825c321c9b55b8a9dc5a128a6684. It is recommended to update the Linux Kernel to this version or later to mitigate the risk.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Conclusion
The EFI Runtime Services vulnerability in the Linux Kernel poses a potential security risk on Apple x86 machines. It is crucial to update the Linux Kernel to version v5.16.5 or a later version to address this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The Linux Kernel is a critical component of the Linux operating system, responsible for managing system resources and providing an interface between hardware and software.
EFI runtime services are a set of functions provided by the firmware of a computer system, allowing software to interact with the system's firmware during runtime.
The impact of this vulnerability is currently unknown, as the actual attack plausibility has not been proven. However, it is essential to address the vulnerability to prevent potential exploitation.
To fix the vulnerability, update the Linux Kernel to version v5.16.5 or a later version.
No workaround has been provided for this vulnerability. It is recommended to update the Linux Kernel to mitigate the risk.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
