kernel CVE-2022-40307
Package
kernel-5.10
(bottlerocket)
Affected versions
< 1.12.0
Patched versions
1.12.0
kernel-5.15
(bottlerocket)
< 1.12.0
1.12.0
A race condition in the Linux kernel's EFI capsule loader driver was found in the way it handled write and flush operations on the device node of the EFI capsule. A local user could potentially use this flaw to crash the system.