In the Linux kernel, the following vulnerability has been resolved:
efi: Do not import certificates from UEFI Secure Boot for T2 Macs
On Apple T2 Macs, when Linux attempts to read the db and dbx efi variables at early boot to load UEFI Secure Boot certificates, a page fault occurs in Apple firmware code and EFI runtime services are disabled with the following logs:
[Firmware Bug]: Page fault caused by firmware at PA: 0xffffb1edc0068000 WARNING: CPU: 3 PID: 104 at arch/x86/platform/efi/quirks.c:735 efi_crash_gracefully_on_page_fault+0x50/0xf0 (Removed some logs from here) Call Trace: <TASK> page_fault_oops+0x4f/0x2c0 ? search_bpf_extables+0x6b/0x80 ? search_module_extables+0x50/0x80 ? search_exception_tables+0x5b/0x60 kernelmode_fixup_or_oops+0x9e/0x110 __bad_area_nosemaphore+0x155/0x190 bad_area_nosemaphore+0x16/0x20 do_kern_addr_fault+0x8c/0xa0 exc_page_fault+0xd8/0x180 asm_exc_page_fault+0x1e/0x30 (Removed some logs from here) ? __efi_call+0x28/0x30 ? switch_mm+0x20/0x30 ? efi_call_rts+0x19a/0x8e0 ? process_one_work+0x222/0x3f0 ? worker_thread+0x4a/0x3d0 ? kthread+0x17a/0x1a0 ? process_one_work+0x3f0/0x3f0 ? set_kthread_struct+0x40/0x40 ? ret_from_fork+0x22/0x30 </TASK> ---[ end trace 1f82023595a5927f ]--- efi: Froze efi_rts_wq and disabled EFI Runtime Services integrity: Couldn't get size: 0x8000000000000015 integrity: MODSIGN: Couldn't get UEFI db list efi: EFI Runtime Services are disabled! integrity: Couldn't get size: 0x8000000000000015 integrity: Couldn't get UEFI dbx list integrity: Couldn't get size: 0x8000000000000015 integrity: Couldn't get mokx list integrity: Couldn't get size: 0x80000000
So we avoid reading these UEFI variables and thus prevent the crash.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-perfUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-modulesUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-develUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-64k-modules-extraUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-rt-64k-debug-modules-coreUpgrade perfUpgrade kernel-develUpgrade libperfUpgrade kernel-uki-virtUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64kUpgrade kernel-rt-coreUpgrade kernel-64k-modules-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debug-modulesUpgrade rvUpgrade kernel-tools-libs-develUpgrade kernel-rt-64k-modulesUpgrade kernel-64k-debug-develUpgrade kernel-64k-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-rt-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-coreUpgrade kernel-64k-coreUpgrade kernel-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade rtlaUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-rt-64k-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernelUpgrade kernel-64kUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-64k-debugUpgrade kernel-coreUpgrade kernel-64k-develUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64k-coreUpgrade kernel-zfcpdump-core | Nov 20, 2025 | Nov 11, 2025 |
| Debian | — | Upgrade linux | Feb 27, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Aug 13, 2025 | Aug 9, 2025 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Feb 26, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 9, 2025 | Feb 26, 2025 |
| Rocky_linux | — | Upgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade libperf-debuginfoUpgrade rvUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-develUpgrade perfUpgrade kernel-uki-virt-addonsUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-toolsUpgrade kernel-rt-modules-coreUpgrade kernel-uki-virtUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modulesUpgrade perf-debuginfoUpgrade kernel-debug-debuginfoUpgrade python3-perfUpgrade kernel-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-develUpgrade kernelUpgrade rtlaUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debug-uki-virtUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade libperfUpgrade kernel-rt-modules-extra | Feb 5, 2026 | Nov 21, 2025 |
| Ubuntu | — | Upgrade linux-ibmUpgrade linux-gcp-5.15Upgrade linuxUpgrade linux-azure-5.4Upgrade linux-gcp-fipsUpgrade linux-azureUpgrade linux-aws-fipsUpgrade linux-realtimeUpgrade linux-intel-iotg-5.15Upgrade linux-iotUpgrade linux-hwe-5.4Upgrade linux-hwe-5.15Upgrade linux-azure-fipsUpgrade linux-raspiUpgrade linux-lowlatency-hwe-5.15Upgrade linux-awsUpgrade linux-nvidiaUpgrade linux-bluefieldUpgrade linux-azure-fde-5.15Upgrade linux-azure-5.15Upgrade linux-gcp-5.4Upgrade linux-intel-iotgUpgrade linux-riscv-5.15Upgrade linux-oracle-5.15Upgrade linux-ibm-5.4Upgrade linux-oracleUpgrade linux-gkeopUpgrade linux-lowlatencyUpgrade linux-aws-5.4Upgrade linux-kvmUpgrade linux-gkeUpgrade linux-gcpUpgrade linux-fipsUpgrade linux-oracle-5.4Upgrade linux-aws-5.15Upgrade linux-raspi-5.4 | Mar 3, 2025 | Feb 26, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 26, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub