Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.7

Linux kernel may crash from efivars registration race

CVE-2025-21998 · published 1 year ago
Summary

The Linux kernel's component that handles firmware variables can crash if it tries to use those variables before its memory pool is ready. This can happen during fast, simultaneous access to firmware settings. Updating the kernel to the latest version resolves the issue.

What to do
  • Update linux kernel to version 6.13.9.
Affected software
Ecosystem VendorProductAffected versions
– linux linux_kernel >= 6.11, < 6.12.21
>= 6.13, < 6.13.9
6.14
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Linux linux kernel >= 6.13.0, < 6.13.9
Fix: upgrade to 6.13.9
Original advisory text
firmware: qcom: uefisecapp: fix efivars registration race
In the Linux kernel, the following vulnerability has been resolved:

firmware: qcom: uefisecapp: fix efivars registration race

Since the conversion to using the TZ allocator, the efivars service is
registered before the memory pool has been allocated, something which
can lead to a NULL-pointer dereference in case of a racing EFI variable
access.

Make sure that all resources have been set up before registering the
efivars.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
4.7 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition
CWE-476NULL Pointer Dereference
Timeline
Published3 Apr 2025
Updated27 Oct 2026
First seen7 Mar 2026
Sources
CVE-2025-21998 · NVD
CVE-2025-21998 · OSV
Track software like this
Free during beta