An issue was discovered in drivers/firmware/efi/efi.c in the Linux kernel before 5.4. Incorrect access permissions for the efivar_ssdt ACPI variable could be used by attackers to bypass lockdown or secure boot restrictions, aka CID-1957a85b0032.
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jul 30, 2020 | Jul 15, 2020 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 15, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 30, 2020 | Aug 19, 2019 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jul 15, 2020 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | Jul 30, 2020 | Jul 15, 2020 |
| Suse | — | Upgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-default | Aug 4, 2020 | Jul 15, 2020 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1066-gkeUpgrade linux-image-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1079-awsUpgrade linux-image-aws-hweUpgrade linux-image-5.3.0-1032-awsUpgrade linux-image-4.15.0-1071-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1083-snapdragonUpgrade linux-image-4.4.0-186-powerpc-smpUpgrade linux-image-4.15.0-1067-raspi2Upgrade linux-image-oemUpgrade linux-image-5.3.0-64-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1077-kvmUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-186-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-gkeop-5.3Upgrade linux-image-5.3.0-64-genericUpgrade linux-image-azure-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-4.4.0-186-powerpc64-smpUpgrade linux-image-4.4.0-186-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc-smpUpgrade linux-image-5.3.0-1032-gkeUpgrade linux-image-4.15.0-112-lowlatencyUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-4.15.0-112-genericUpgrade linux-image-5.3.0-1032-gcpUpgrade linux-image-4.4.0-1111-awsUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-1140-snapdragonUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oracleUpgrade linux-image-4.15.0-112-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-5.0.0-1065-oem-osp1Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-oem-osp1Upgrade linux-image-4.4.0-186-powerpc-e500mcUpgrade linux-image-4.4.0-1136-raspi2Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1092-azureUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-186-powerpc64-embUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.3.0-1030-raspi2Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1093-oemUpgrade linux-image-gke-5.3Upgrade linux-image-4.15.0-1080-gcpUpgrade linux-image-4.4.0-1075-awsUpgrade linux-image-4.15.0-1050-oracleUpgrade linux-image-5.3.0-1034-azureUpgrade linux-image-raspi2Upgrade linux-image-gcpUpgrade linux-image-awsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-kvmUpgrade linux-image-4.4.0-186-lowlatencyUpgrade linux-image-gke-5.0Upgrade linux-image-5.0.0-1045-gkeUpgrade linux-image-virtualUpgrade linux-image-5.3.0-64-lowlatencyUpgrade linux-image-5.3.0-1030-oracleUpgrade linux-image-gke-4.15Upgrade linux-image-azure | Aug 5, 2020 | Jul 15, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub