efivarfs: Rate limit statfs() handler
In the Linux kernel, the following vulnerability has been resolved: efivarfs: Rate limit statfs() handler Ravi reports that statfs() may be called by unprivileged users on the efivarfs mount point, which may result in a flood of calls to the QueryVariableInfo() runtime service. These calls are disproportionately costly on x86 systems where the variable store is backed by SMM, as each SMM entry requires a rendez-vous of all the CPUs. So rate limit the calls to QueryVariableInfo() at twice per second, and return the most recently obtained value for calls that are elided.
CVE-2026-89604
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-89604
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "115409cbb6a296d73702a62c54c5b1b11cb88b3d",
"lessThan": "97d71ebee48cd1b29091762b3e5cca4f815dd84c",
"versionType": "git"
},
{
"status": "affected",
"version": "d86ff3333cb1d5f42d8898fb5fdb304e143c0237",
"lessThan": "3cd611c9f1dbcc116c8af5112e3c1783c8cde2ae",
"versionType": "git"
},
{
"status": "affected",
"version": "d86ff3333cb1d5f42d8898fb5fdb304e143c0237",
"lessThan": "8953bdd1b9c0e748d5408d3d0b8e7aeee5c9cd41",
"versionType": "git"
},
{
"status": "affected",
"version": "d86ff3333cb1d5f42d8898fb5fdb304e143c0237",
"lessThan": "92895a14329cc9533e2a74a265214f690ba3851a",
"versionType": "git"
},
{
"status": "affected",
"version": "d86ff3333cb1d5f42d8898fb5fdb304e143c0237",
"lessThan": "0dbc2e94b81df5a1264068b6ed3605c654b8afcb",
"versionType": "git"
},
{
"status": "affected",
"version": "d86ff3333cb1d5f42d8898fb5fdb304e143c0237",
"lessThan": "b2326338dc683e8c1067c0cbf7a47986c4190902",
"versionType": "git"
},
{
"status": "affected",
"version": "6.1.178",
"lessThan": "6.1.188",
"versionType": "semver"
}
],
"programFiles": [
"fs/efivarfs/super.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "6.5"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "6.5",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "6.1.188",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.6.157",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.12.109",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.18.50",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.2.4",
"versionType": "semver",
"lessThanOrEqual": "7.2.*"
},
{
"status": "unaffected",
"version": "7.3",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"fs/efivarfs/super.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2026-89604
Source reference:
/cveMetadata/cveId
Publisher severity
No explicit severity was provided.
- Event
- #35110 · Revision 1
- Added to Heist Feed
- Publisher date