In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or unavailable. IMA prevents setting "ima_appraise=log" from the boot param when Secure Boot is enabled, but this does not cover cases where lockdown is used without Secure Boot. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity, Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-uki-virtUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-cross-headersUpgrade kernel-abi-stablelistsUpgrade kernel-64k-coreUpgrade kernel-64kUpgrade kernel-modules-coreUpgrade kernel-64k-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modulesUpgrade rtlaUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-docUpgrade kernel-rt-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-debugUpgrade kernelUpgrade kernel-64k-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade python3-perfUpgrade kernel-64k-debugUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-rt-modules-coreUpgrade bpftoolUpgrade kernel-64k-debug-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-core | May 15, 2023 | May 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.135-122.509Upgrade perf-debuginfoUpgrade kernel-livepatch-5.15.59-33.133Upgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64 | Sep 30, 2022 | Sep 30, 2022 |
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-develUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-static | Feb 17, 2025 | Jul 19, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 15, 2023 | May 9, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 30, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 20, 2022 | Jul 19, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | May 15, 2023 | May 9, 2023 |
| Suse | — | Upgrade kernel-64kbUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-preemptUpgrade kernel-kvmsmallUpgrade kernel-symsUpgrade kernel-preempt-livepatch-develUpgrade kernel-default-baseUpgrade dtb-amdUpgrade kernel-default-develUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade dtb-exynosUpgrade kernel-azure-extraUpgrade dtb-amazonUpgrade kernel-source-azureUpgrade kernel-kvmsmall-develUpgrade dtb-mediatekUpgrade gfs2-kmp-64kbUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade reiserfs-kmp-preemptUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-sourceUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade kernel-debug-develUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-preemptUpgrade dtb-xilinxUpgrade dtb-apmUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-azureUpgrade dtb-freescaleUpgrade dtb-renesasUpgrade kernel-develUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade dtb-appleUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-default-optionalUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade kernel-default-livepatch-develUpgrade kernel-preempt-optionalUpgrade dtb-broadcomUpgrade kernel-syms-azureUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade kernel-defaultUpgrade dtb-sprdUpgrade dlm-kmp-preemptUpgrade kselftests-kmp-preemptUpgrade dtb-allwinnerUpgrade kernel-preempt-develUpgrade kernel-64kb-extraUpgrade kernel-source-vanillaUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade dtb-qcomUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-azureUpgrade dtb-socionextUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-azure-develUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade dtb-marvellUpgrade kernel-azureUpgrade dtb-alUpgrade dtb-zteUpgrade kernel-preemptUpgrade dtb-nvidiaUpgrade dtb-alteraUpgrade dtb-rockchipUpgrade gfs2-kmp-preemptUpgrade dlm-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade dtb-caviumUpgrade kernel-preempt-extra | Oct 26, 2022 | Aug 24, 2022 |
| Ubuntu | — | Upgrade linux-image-oem-22.04Upgrade linux-image-5.17.0-1030-oemUpgrade linux-image-oem-22.04a | Apr 21, 2023 | Apr 19, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 24, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub