{"id":"CVE-2026-89604","revision":"fb215df2f83b4562bb220c8315e8f5a6","records":[{"revision":"fb215df2f83b4562bb220c8315e8f5a6","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-89604","aliases":[],"title":"efivarfs: Rate limit statfs() handler","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nefivarfs: Rate limit statfs() handler\n\nRavi reports that statfs() may be called by unprivileged users on the\nefivarfs mount point, which may result in a flood of calls to the\nQueryVariableInfo() runtime service. These calls are disproportionately\ncostly on x86 systems where the variable store is backed by SMM, as each\nSMM entry requires a rendez-vous of all the CPUs.\n\nSo rate limit the calls to QueryVariableInfo() at twice per second, and\nreturn the most recently obtained value for calls that are elided.","state":0,"publishedAt":"2026-09-11T19:45:07.365+00:00","modifiedAt":"2026-10-19T08:49:35.476+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/efivarfs/super.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"115409cbb6a296d73702a62c54c5b1b11cb88b3d\",\n                            \"lessThan\": \"97d71ebee48cd1b29091762b3e5cca4f815dd84c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d86ff3333cb1d5f42d8898fb5fdb304e143c0237\",\n                            \"lessThan\": \"3cd611c9f1dbcc116c8af5112e3c1783c8cde2ae\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d86ff3333cb1d5f42d8898fb5fdb304e143c0237\",\n                            \"lessThan\": \"8953bdd1b9c0e748d5408d3d0b8e7aeee5c9cd41\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d86ff3333cb1d5f42d8898fb5fdb304e143c0237\",\n                            \"lessThan\": \"92895a14329cc9533e2a74a265214f690ba3851a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d86ff3333cb1d5f42d8898fb5fdb304e143c0237\",\n                            \"lessThan\": \"0dbc2e94b81df5a1264068b6ed3605c654b8afcb\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d86ff3333cb1d5f42d8898fb5fdb304e143c0237\",\n                            \"lessThan\": \"b2326338dc683e8c1067c0cbf7a47986c4190902\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"6.1.178\",\n                            \"lessThan\": \"6.1.188\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/efivarfs/super.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.5\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.5\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.188\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.157\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.109\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.50\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.4\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/97d71ebee48cd1b29091762b3e5cca4f815dd84c","https://git.kernel.org/stable/c/3cd611c9f1dbcc116c8af5112e3c1783c8cde2ae","https://git.kernel.org/stable/c/8953bdd1b9c0e748d5408d3d0b8e7aeee5c9cd41","https://git.kernel.org/stable/c/92895a14329cc9533e2a74a265214f690ba3851a","https://git.kernel.org/stable/c/0dbc2e94b81df5a1264068b6ed3605c654b8afcb","https://git.kernel.org/stable/c/b2326338dc683e8c1067c0cbf7a47986c4190902"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-89604","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-89604","identifiers":["CVE-2026-89604"]},"retained":false,"historicalAffected":[]}],"coverage":[]}