REDHAT-BUG-2513060: Low severity vulnerability
NULL-pointer dereference in isremovablemediapath(): when DevicePathToStr() returns NULL (e.g. on EFI pool-allocation failure), the result is passed directly to StrnCaseCmp(), which dereferences it on the first loop iteration and crashes. This is a robustness / defensive-hardening issue -- a missing NULL check on a boot-path helper, rather than an attacker-controlled memory-safety bug.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2513060?
The severity of REDHAT-BUG-2513060 is rated as low.
What is REDHAT-BUG-2513060 about?
REDHAT-BUG-2513060 describes a NULL-pointer dereference in the `is_removable_media_path()` function, which can lead to crashes.
How does REDHAT-BUG-2513060 impact system stability?
REDHAT-BUG-2513060 can cause system instability by crashing when the program tries to dereference a NULL pointer.
How can I fix REDHAT-BUG-2513060?
To fix REDHAT-BUG-2513060, ensure the code checks for NULL return values from DevicePathToStr() before dereferencing.
Is there a workaround for REDHAT-BUG-2513060?
Currently, there are no officially documented workarounds for REDHAT-BUG-2513060 other than applying the patch once available.