CVE-2024-35803

A security vulnerability was identified in the Linux kernel's EFI (Extensible Firmware Interface) stub, specifically affecting systems operating in mixed-mode environments. The issue arises from the EFI stub's handling of boot services, which can lead to stack overflows and potential system instability.

This vulnerability is rated as Moderate severity because it requires a non-standard mixed-mode UEFI configuration and is constrained to early boot-time disruption without runtime privilege escalation. Standard enterprise deployments of Red Hat Enterprise Linux typically run on native 64-bit UEFI or BIOS firmware, rendering systems unaffected in standard configurations. Consequently, the flaw only presents a local denial-of-service risk during initial startup on specialized or legacy hardware platforms.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.