CVE-2025-21998

MEDIUM

Linux Kernel 6.11-6.12.20 - Time-of-check Time-of-use Race Condition in EFI Variable Access

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: uefisecapp: fix efivars registration race Since the conversion to using the TZ allocator, the efivars service is registered before the memory pool has been allocated, something which can lead to a NULL-pointer dereference in case of a racing EFI variable access. Make sure that all resources have been set up before registering the efivars.

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/c4e37b381a7a243c298a4858fc0a5a74e737c79a

Patch

https://git.kernel.org/stable/c/f15a2b96a0e41c426c63a932d0e63cde7b9784aa

Patch

https://git.kernel.org/stable/c/da8d493a80993972c427002684d0742560f3be4a

Scores

CVSS v3 4.7

EPSS 0.0011

EPSS Percentile 1.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-367 CWE-476

Status published

Products (12)

linux/Kernel 6.11.0 - 6.12.21linux

linux/Kernel 6.13.0 - 6.13.9linux

Linux/Linux < 6.11

Linux/Linux 6.11

Linux/Linux 6.12.21 - 6.12.*

Linux/Linux 6.13.9 - 6.13.*

Linux/Linux 6.14

Linux/Linux 6612103ec35af6058bb85ab24dae28e119b3c055 - c4e37b381a7a243c298a4858fc0a5a74e737c79a

Linux/Linux 6612103ec35af6058bb85ab24dae28e119b3c055 - da8d493a80993972c427002684d0742560f3be4a

Linux/Linux 6612103ec35af6058bb85ab24dae28e119b3c055 - f15a2b96a0e41c426c63a932d0e63cde7b9784aa

... and 2 more

Published Apr 03, 2025

Tracked Since Feb 18, 2026