The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended securelevel/secureboot restrictions by leveraging improper handling of secure_boot flag across kexec reboot.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 19, 2017 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-develUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade python3-perfUpgrade kernel-source | Nov 3, 2020 | Sep 19, 2017 |
| Oracle_linux | — | Upgrade kernel | Jan 5, 2019 | Sep 19, 2017 |
| Ubuntu | — | Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-93-generic-lpaeUpgrade linux-image-4.4.0-93-powerpc-e500mcUpgrade linux-image-4.4.0-93-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1032-awsUpgrade linux-image-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-93-powerpc-smpUpgrade linux-image-4.4.0-93-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-genericUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-93-powerpc64-smpUpgrade linux-image-4.4.0-93-powerpc64-embUpgrade linux-image-raspi2Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1071-raspi2Upgrade linux-image-4.4.0-1028-gkeUpgrade linux-image-4.4.0-1073-snapdragonUpgrade linux-image-powerpc-e500mc-lts-xenial | Aug 29, 2017 | Nov 19, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub