https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 10:01:22 +0000 https://vulnerability.circl.lu/vuln/cve-2026-89604 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>efivarfs: Rate limit statfs() handler</p> <p>Ravi reports that statfs() may be called by unprivileged users on the efivarfs mount point, which may result in a flood of calls to the QueryVariableInfo() runtime service. These calls are disproportionately costly on x86 systems where the variable store is backed by SMM, as each SMM entry requires a rendez-vous of all the CPUs.</p> <p>So rate limit the calls to QueryVariableInfo() at twice per second, and return the most recently obtained value for calls that are elided.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>efivarfs: Rate limit statfs() handler</p> <p>Ravi reports that statfs() may be called by unprivileged users on the efivarfs mount point, which may result in a flood of calls to the QueryVariableInfo() runtime service. These calls are disproportionately costly on x86 systems where the variable store is backed by SMM, as each SMM entry requires a rendez-vous of all the CPUs.</p> <p>So rate limit the calls to QueryVariableInfo() at twice per second, and return the most recently obtained value for calls that are elided.</p> https://vulnerability.circl.lu/vuln/cve-2026-89604