CVE-2024-33619

In the Linux kernel, the following vulnerability has been resolved: efi: libstub: only free priv.runtime_map when allocated priv.runtime_map is only allocated when efi_novamap is not set. Otherwise, it is an uninitialized value. In the error path, it is freed unconditionally. Avoid passing an uninitialized value to free_pool. Free priv.runtime_map only when it was allocated. This bug was discovered and resolved using Coverity Static Analysis Security Testing (SAST) by Synopsys, Inc.

• CWE-908

• https://git.kernel.org/stable/c/4b2543f7e1e6b91cfc8dd1696e3cdf01c3ac8974Mailing List, Patch
• https://git.kernel.org/stable/c/6ca67a5fe1c606d1fbe24c30a9fc0bdc43a18554Mailing List, Patch
• https://git.kernel.org/stable/c/9dce01f386c9ce6990c0a83fa14b1c95330b037eMailing List, Patch
• https://git.kernel.org/stable/c/b8938d6f570f010a1dcdbfed3e5b5d3258c2a908Mailing List, Patch
• https://git.kernel.org/stable/c/4b2543f7e1e6b91cfc8dd1696e3cdf01c3ac8974Mailing List, Patch
• https://git.kernel.org/stable/c/6ca67a5fe1c606d1fbe24c30a9fc0bdc43a18554Mailing List, Patch
• https://git.kernel.org/stable/c/9dce01f386c9ce6990c0a83fa14b1c95330b037eMailing List, Patch
• https://git.kernel.org/stable/c/b8938d6f570f010a1dcdbfed3e5b5d3258c2a908Mailing List, Patch

Published

Jun 21, 2024

Last Modified

Aug 4, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-33611Improper input validation for some Intel(R) PROSet/Wireless …4.6
• CVE-2024-33612An improper certificate validation vulnerability exists in B…6.8
• CVE-2024-33615A specially crafted Zip file containing path traversal chara…8.8
• CVE-2024-33616Admin authentication can be bypassed with some specific inva…5.3
• CVE-2024-33617Insufficient control flow management in some Intel(R) QAT En…8.2
• CVE-2024-33618Uncontrolled Resource Consumption in Bosch VMS Central Serve…7.5
• CVE-2024-3362A vulnerability was found in SourceCodester Online Library S…8.8
• CVE-2024-33620Absolute path traversal vulnerability exists in ID Link Mana…8.6
• CVE-2024-33621In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-33622Missing authentication for critical function vulnerability e…6.5
• CVE-2024-33623A denial of service vulnerability exists in the Web Applicat…7.5
• CVE-2024-33624Improper input validation for some Intel(R) PROSet/Wireless …5.3