CVE-2022-49357

Advisory lineage Upstream: 0 Downstream: 9
Analyzed
Published: 26 Feb 2025, 02:11
Last modified:11 May 2026, 18:58

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
v3.1 (nvd)
EPSS Score
0.05% LOW
0% probability +0.03%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

26 Feb 2025, 02:11
Published
Vulnerability first disclosed
11 May 2026, 18:58
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: efi: Do not import certificates from UEFI Secure Boot for T2 Macs On Apple T2 Macs, when Linux attempts to read the db and dbx efi variables at early boot to load UEFI Secure Boot certificates, a page fault occurs in Apple firmware code and EFI runtime services are disabled with the following logs: [Firmware Bug]: Page fault caused by firmware at PA: 0xffffb1edc0068000 WARNING: CPU: 3 PID: 104 at arch/x86/platform/efi/quirks.c:735 efi_crash_gracefully_on_page_fault+0x50/0xf0 (Removed some logs from here) Call Trace: <TASK> page_fault_oops+0x4f/0x2c0 ? search_bpf_extables+0x6b/0x80 ? search_module_extables+0x50/0x80 ? search_exception_tables+0x5b/0x60 kernelmode_fixup_or_oops+0x9e/0x110 __bad_area_nosemaphore+0x155/0x190 bad_area_nosemaphore+0x16/0x20 do_kern_addr_fault+0x8c/0xa0 exc_page_fault+0xd8/0x180 asm_exc_page_fault+0x1e/0x30 (Removed some logs from here) ? __efi_call+0x28/0x30 ? switch_mm+0x20/0x30 ? efi_call_rts+0x19a/0x8e0 ? process_one_work+0x222/0x3f0 ? worker_thread+0x4a/0x3d0 ? kthread+0x17a/0x1a0 ? process_one_work+0x3f0/0x3f0 ? set_kthread_struct+0x40/0x40 ? ret_from_fork+0x22/0x30 </TASK> ---[ end trace 1f82023595a5927f ]--- efi: Froze efi_rts_wq and disabled EFI Runtime Services integrity: Couldn't get size: 0x8000000000000015 integrity: MODSIGN: Couldn't get UEFI db list efi: EFI Runtime Services are disabled! integrity: Couldn't get size: 0x8000000000000015 integrity: Couldn't get UEFI dbx list integrity: Couldn't get size: 0x8000000000000015 integrity: Couldn't get mokx list integrity: Couldn't get size: 0x80000000 So we avoid reading these UEFI variables and thus prevent the crash.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.05%• Percentile: 16%

Affected Systems

  • linux•linux

    ≥ 15ea0e1e3e185040bed6119f815096f2e4326242, < b1cda6dd2c44771f042d65f0d17bec322ef99a0a | ≥ 15ea0e1e3e185040bed6119f815096f2e4326242, < c072cab98bac11f6ef9db640fb51834d9552e2e6 | ≥ 15ea0e1e3e185040bed6119f815096f2e4326242, < 65237307f88f5200782ae7f243bdd385e37cde5d | ≥ 15ea0e1e3e185040bed6119f815096f2e4326242, < b34786b25d75f9c119696e6bdf3827f54ae3601b | ≥ 15ea0e1e3e185040bed6119f815096f2e4326242, < 1f7264f0510f519b4e4f575a8f0579ea65e7592e | ≥ 15ea0e1e3e185040bed6119f815096f2e4326242, < 155ca952c7ca19aa32ecfb7373a32bbc2e1ec6eb | 5.0

  • linux•linux_kernel

    ≥ 5.0, < 5.4.198 | ≥ 5.5, < 5.10.121 | ≥ 5.11, < 5.15.46 | ≥ 5.16, < 5.17.14 | ≥ 5.18, < 5.18.3

References (6)