CVE-2024-49925

A flaw was found in the Linux kernel's fbdev: efifb component. A local attacker could exploit a Use-After-Free (UAF) race condition during the unregistering of sysctl attributes. This vulnerability allows sysctl attributes to be used after their associated memory has been freed, which can lead to a system crash (Denial of Service) or potentially information disclosure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

The efifb module can be prevented from loading by blacklisting it. This may impact systems relying on EFI framebuffer for console output.

To blacklist the module, create a file /etc/modprobe.d/blacklist-efifb.conf with the following content:

blacklist efifb
install efifb /bin/true

After creating the file, regenerate the initramfs and reboot the system for the changes to take effect.

dracut -f -v
reboot

If the system relies on EFI framebuffer for graphical console, this mitigation may prevent graphical console output.