CVE-2024-56573

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability has been resolved in the Linux kernel, specifically in efi/libstub, where the correct pointer is freed on failure. The cmdline ptr is an out parameter that is not allocated by the function itself and likely points into the caller's stack. The cmdline refers to the pool allocation that should be freed when cleaning up after a failure, and it should be passed to free pool() instead.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.