The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database (aka dbx) protection mechanism. This affects certs/blacklist.c and certs/system_keyring.c.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Oct 2, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade python-perfUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-headers | Jul 4, 2022 | Oct 2, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Jun 30, 2021 | Oct 2, 2020 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 2, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Mar 3, 2022 | Oct 2, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jul 1, 2021 | Sep 15, 2020 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jun 30, 2021 | Oct 2, 2020 |
| Rocky_linux | — | Upgrade kernel-cross-headersUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-tools-libs-develUpgrade kernel-debuginfoUpgrade kernelUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade perfUpgrade kernel-debug-debuginfoUpgrade kernel-coreUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-debug-modules-extra | May 5, 2022 | Oct 2, 2020 |
| Suse | — | Upgrade kernel-vanillaUpgrade ocfs2-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-preemptUpgrade dtb-sprdUpgrade kernel-syms-azureUpgrade kselftests-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-debug-baseUpgrade kernel-preempt-develUpgrade dtb-allwinnerUpgrade dtb-apmUpgrade kernel-vanilla-baseUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade dtb-caviumUpgrade kernel-rtUpgrade kernel-azure-develUpgrade kernel-preempt-extraUpgrade kernel-docsUpgrade kernel-default-optionalUpgrade kselftests-kmp-preemptUpgrade dtb-rockchipUpgrade kernel-debugUpgrade kernel-default-extraUpgrade dtb-armUpgrade cluster-md-kmp-preemptUpgrade dtb-xilinxUpgrade kernel-64kb-extraUpgrade kernel-zfcpdump-manUpgrade kernel-64kb-develUpgrade kernel-develUpgrade dtb-exynosUpgrade reiserfs-kmp-azureUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade kernel-sourceUpgrade dtb-zteUpgrade dtb-alUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade dtb-socionextUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-preemptUpgrade kernel-kvmsmallUpgrade dtb-amdUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-renesasUpgrade dlm-kmp-preemptUpgrade gfs2-kmp-preemptUpgrade ocfs2-kmp-preemptUpgrade dtb-amlogicUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-preempt-optionalUpgrade kernel-source-azureUpgrade kernel-azure-baseUpgrade gfs2-kmp-64kbUpgrade kernel-vanilla-develUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-azureUpgrade dtb-lgUpgrade kernel-kvmsmall-develUpgrade dtb-freescaleUpgrade kernel-macrosUpgrade kernel-docs-htmlUpgrade kernel-64kb-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-64kbUpgrade dlm-kmp-64kbUpgrade kernel-default-manUpgrade kselftests-kmp-64kbUpgrade kernel-debug-develUpgrade dtb-hisiliconUpgrade kernel-preempt-livepatch-develUpgrade kernel-default-baseUpgrade kernel-kvmsmall-baseUpgrade reiserfs-kmp-64kbUpgrade kernel-vanilla-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade dlm-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-zfcpdumpUpgrade dtb-alteraUpgrade kernel-azure-optionalUpgrade kernel-default-develUpgrade kernel-default-livepatch-develUpgrade dtb-broadcomUpgrade dtb-marvell | Aug 9, 2024 | Oct 2, 2020 |
| Ubuntu | — | Upgrade linux-image-5.11.0-34-genericUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.10.0-1049-oemUpgrade linux-image-5.8.0-1043-azureUpgrade linux-image-5.4.0-1051-kvmUpgrade linux-image-5.11.0-1015-azureUpgrade linux-image-5.4.0-1057-gkeUpgrade linux-image-5.4.0-1065-azureUpgrade linux-image-5.11.0-1017-raspiUpgrade linux-image-kvmUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-awsUpgrade linux-image-virtualUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1059-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1048-raspiUpgrade linux-image-5.4.0-92-genericUpgrade linux-image-5.11.0-1018-gcpUpgrade linux-image-bluefieldUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.11.0-34-generic-64kUpgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-92-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.11.0-1017-awsUpgrade linux-image-5.4.0-1029-gkeopUpgrade linux-image-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1023-bluefieldUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-oem-osp1Upgrade linux-image-gkeopUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1059-oracleUpgrade linux-image-5.11.0-1017-raspi-nolpaeUpgrade linux-image-5.11.0-1017-oracleUpgrade linux-image-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.11.0-1015-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1010-ibmUpgrade linux-image-5.4.0-92-generic-lpaeUpgrade linux-image-5.11.0-34-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-oemUpgrade linux-image-oem-20.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-ibmUpgrade linux-image-5.11.0-34-generic-lpaeUpgrade linux-image-raspi2 | Sep 9, 2021 | Oct 2, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub