In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or unavailable. IMA prevents setting "ima_appraise=log" from the boot param when Secure Boot is enabled, but this does not cover cases where lockdown is used without Secure Boot. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity, Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rtUpgrade kernel-rt-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-debug-modulesUpgrade perfUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-uki-virtUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-kvmUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-coreUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-debug-modules-coreUpgrade kernel-docUpgrade kernelUpgrade kernel-coreUpgrade kernel-64kUpgrade kernel-zfcpdump-modulesUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-modules-extraUpgrade kernel-64k-develUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-develUpgrade kernel-64k-modulesUpgrade kernel-debugUpgrade kernel-64k-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-coreUpgrade kernel-uki-virtUpgrade kernel-64k-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-coreUpgrade rtlaUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump | May 15, 2023 | May 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.59-33.133Upgrade kernel-develUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-livepatch-5.10.135-122.509Upgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade perf | Sep 30, 2022 | Sep 30, 2022 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-develUpgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-libbpf | Feb 17, 2025 | Jul 19, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 15, 2023 | May 9, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 30, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jul 20, 2022 | Jul 19, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | May 15, 2023 | May 9, 2023 |
| Suse | — | Upgrade kernel-devel-azureUpgrade dtb-apmUpgrade dtb-mediatekUpgrade kernel-preempt-optionalUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-preemptUpgrade dtb-lgUpgrade reiserfs-kmp-azureUpgrade dtb-exynosUpgrade kernel-64kb-develUpgrade kernel-azure-extraUpgrade kernel-obs-qaUpgrade dtb-amdUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-preempt-livepatch-develUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-default-develUpgrade kernel-64kb-optionalUpgrade kernel-symsUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-armUpgrade kernel-default-livepatch-develUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-defaultUpgrade kernel-macrosUpgrade dtb-amlogicUpgrade kernel-source-azureUpgrade dtb-xilinxUpgrade kernel-64kb-livepatch-develUpgrade dtb-appleUpgrade dtb-freescaleUpgrade dtb-renesasUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-default-optionalUpgrade cluster-md-kmp-preemptUpgrade kernel-sourceUpgrade kernel-default-baseUpgrade kernel-kvmsmall-develUpgrade dtb-amazonUpgrade ocfs2-kmp-preemptUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade dtb-alteraUpgrade dtb-rockchipUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-preemptUpgrade dtb-caviumUpgrade dtb-broadcomUpgrade dtb-allwinnerUpgrade dtb-nvidiaUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade dlm-kmp-preemptUpgrade kselftests-kmp-preemptUpgrade dtb-alUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade dtb-socionextUpgrade dtb-qcomUpgrade kernel-syms-azureUpgrade kernel-azureUpgrade dtb-marvellUpgrade kernel-azure-develUpgrade gfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-defaultUpgrade kernel-preempt-extraUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade kernel-64kb-extraUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade kernel-rtUpgrade kernel-source-vanillaUpgrade kernel-preemptUpgrade dtb-zteUpgrade dlm-kmp-64kbUpgrade kernel-preempt-devel | Oct 26, 2022 | Aug 24, 2022 |
| Ubuntu | — | Upgrade linux-image-oem-22.04Upgrade linux-image-5.17.0-1030-oemUpgrade linux-image-oem-22.04a | Apr 21, 2023 | Apr 19, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub