CVE-2022-48769

A flaw was found in the Linux kernel's EFI (Extensible Firmware Interface) runtime services. On Apple x86 systems, calling EFI version 2 runtime variable services triggers a firmware crash. A local user can exploit this vulnerability by accessing EFI variable services, resulting in a Denial of Service (DoS) caused by a complete system crash.

This vulnerability is rated with a Low severity impact because exploitation is restricted to Apple x86 hardware, which is not a supported architecture for enterprise Red Hat deployments. In addition, triggering the firmware failure requires local administrative privileges (such as root or CAP_SYS_ADMIN) to interact with EFI runtime variable services. Standard server platforms running Red Hat Enterprise Linux are not susceptible to this denial-of-service condition.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.