In the Linux kernel, the following vulnerability has been resolved:
efi: Do not import certificates from UEFI Secure Boot for T2 Macs
On Apple T2 Macs, when Linux attempts to read the db and dbx efi variables at early boot to load UEFI Secure Boot certificates, a page fault occurs in Apple firmware code and EFI runtime services are disabled with the following logs:
[Firmware Bug]: Page fault caused by firmware at PA: 0xffffb1edc0068000 WARNING: CPU: 3 PID: 104 at arch/x86/platform/efi/quirks.c:735 efi_crash_gracefully_on_page_fault+0x50/0xf0 (Removed some logs from here) Call Trace: <TASK> page_fault_oops+0x4f/0x2c0 ? search_bpf_extables+0x6b/0x80 ? search_module_extables+0x50/0x80 ? search_exception_tables+0x5b/0x60 kernelmode_fixup_or_oops+0x9e/0x110 __bad_area_nosemaphore+0x155/0x190 bad_area_nosemaphore+0x16/0x20 do_kern_addr_fault+0x8c/0xa0 exc_page_fault+0xd8/0x180 asm_exc_page_fault+0x1e/0x30 (Removed some logs from here) ? __efi_call+0x28/0x30 ? switch_mm+0x20/0x30 ? efi_call_rts+0x19a/0x8e0 ? process_one_work+0x222/0x3f0 ? worker_thread+0x4a/0x3d0 ? kthread+0x17a/0x1a0 ? process_one_work+0x3f0/0x3f0 ? set_kthread_struct+0x40/0x40 ? ret_from_fork+0x22/0x30 </TASK> ---[ end trace 1f82023595a5927f ]--- efi: Froze efi_rts_wq and disabled EFI Runtime Services integrity: Couldn't get size: 0x8000000000000015 integrity: MODSIGN: Couldn't get UEFI db list efi: EFI Runtime Services are disabled! integrity: Couldn't get size: 0x8000000000000015 integrity: Couldn't get UEFI dbx list integrity: Couldn't get size: 0x8000000000000015 integrity: Couldn't get mokx list integrity: Couldn't get size: 0x80000000
So we avoid reading these UEFI variables and thus prevent the crash.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modulesUpgrade rvUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-docUpgrade kernel-rt-debugUpgrade kernel-devel-matchedUpgrade kernel-rt-64k-modules-extraUpgrade python3-perfUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debugUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-uki-virtUpgrade kernel-rt-64k-debug-coreUpgrade kernel-develUpgrade kernel-64k-modules-coreUpgrade kernel-rt-develUpgrade perfUpgrade kernel-64k-debug-develUpgrade kernel-rt-64k-debug-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-modulesUpgrade kernel-toolsUpgrade kernel-rt-64kUpgrade kernel-rtUpgrade libperfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64k-debugUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernel-64kUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-64k-debugUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-64k-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-modulesUpgrade kernel-64k-develUpgrade kernel-rt-64k-develUpgrade kernel-debug-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-abi-stablelistsUpgrade rtlaUpgrade kernel-64k-debug-modules-extraUpgrade kernelUpgrade kernel-rt-64k-coreUpgrade kernel-zfcpdump-develUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade kernel-debug-devel-matched | Nov 20, 2025 | Nov 11, 2025 |
| Debian | — | Upgrade linux | Feb 27, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade python3-perf | Aug 13, 2025 | Aug 9, 2025 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Feb 26, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 9, 2025 | Feb 26, 2025 |
| Rocky_linux | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-coreUpgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade libperfUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-debuginfoUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-rt-debug-develUpgrade kernel-modules-coreUpgrade kernel-develUpgrade kernel-debug-uki-virtUpgrade kernel-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade rtlaUpgrade kernel-devel-matchedUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade perfUpgrade kernel-rt-debug-modules-coreUpgrade kernel-uki-virtUpgrade rvUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade perf-debuginfoUpgrade kernel-uki-virt-addonsUpgrade kernel-rtUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade libperf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-devel | Feb 5, 2026 | Nov 21, 2025 |
| Ubuntu | — | Upgrade linux-gkeopUpgrade linux-gcp-5.4Upgrade linux-azure-fde-5.15Upgrade linux-bluefieldUpgrade linux-lowlatencyUpgrade linux-raspi-5.4Upgrade linux-aws-5.15Upgrade linux-aws-5.4Upgrade linux-riscv-5.15Upgrade linux-intel-iotgUpgrade linux-kvmUpgrade linux-gcpUpgrade linux-azure-5.15Upgrade linux-oracle-5.15Upgrade linux-oracleUpgrade linux-ibm-5.4Upgrade linux-nvidiaUpgrade linux-gkeUpgrade linux-oracle-5.4Upgrade linux-fipsUpgrade linux-azureUpgrade linux-aws-fipsUpgrade linux-raspiUpgrade linux-azure-5.4Upgrade linux-gcp-fipsUpgrade linuxUpgrade linux-azure-fipsUpgrade linux-realtimeUpgrade linux-intel-iotg-5.15Upgrade linux-gcp-5.15Upgrade linux-hwe-5.15Upgrade linux-ibmUpgrade linux-lowlatency-hwe-5.15Upgrade linux-awsUpgrade linux-hwe-5.4Upgrade linux-iot | Mar 3, 2025 | Feb 26, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 26, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub