The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database (aka dbx) protection mechanism. This affects certs/blacklist.c and certs/system_keyring.c.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-devel | May 4, 2022 | Oct 2, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-tools-develUpgrade python-perfUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-debuginfo | Jul 4, 2022 | Oct 2, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Jun 30, 2021 | Oct 2, 2020 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Oct 2, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Mar 3, 2022 | Oct 2, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 1, 2021 | Sep 15, 2020 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jun 30, 2021 | Oct 2, 2020 |
| Rocky_linux | — | Upgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-coreUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade kernel-develUpgrade kernel-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade python3-perf-debuginfoUpgrade kernel-tools-libs-develUpgrade bpftoolUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | May 5, 2022 | Oct 2, 2020 |
| Suse | — | Upgrade kernel-syms-azureUpgrade kernel-preemptUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-mediatekUpgrade kernel-symsUpgrade dtb-apmUpgrade kernel-vanilla-baseUpgrade kernel-default-base-rebuildUpgrade kernel-devel-azureUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdump-manUpgrade kernel-vanillaUpgrade dtb-nvidiaUpgrade kernel-debugUpgrade dtb-alUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade kernel-develUpgrade dtb-rockchipUpgrade kernel-default-extraUpgrade dtb-sprdUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade dtb-xilinxUpgrade kselftests-kmp-preemptUpgrade kernel-preempt-develUpgrade kernel-preempt-extraUpgrade kernel-rtUpgrade dtb-qcomUpgrade kernel-debug-baseUpgrade cluster-md-kmp-preemptUpgrade dtb-caviumUpgrade kernel-sourceUpgrade reiserfs-kmp-azureUpgrade dtb-zteUpgrade kernel-azure-develUpgrade kernel-obs-qaUpgrade dtb-exynosUpgrade kernel-64kb-develUpgrade kernel-64kb-extraUpgrade dtb-armUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-baseUpgrade kernel-kvmsmallUpgrade kernel-preempt-optionalUpgrade dtb-hisiliconUpgrade kernel-azure-extraUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-baseUpgrade kernel-default-manUpgrade kernel-obs-buildUpgrade kernel-64kbUpgrade dtb-marvellUpgrade gfs2-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-vanilla-develUpgrade kernel-source-azureUpgrade cluster-md-kmp-azureUpgrade dtb-lgUpgrade kernel-64kb-livepatch-develUpgrade dtb-amlogicUpgrade ocfs2-kmp-64kbUpgrade kernel-azureUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-preemptUpgrade dtb-alteraUpgrade kernel-default-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-azure-optionalUpgrade dtb-broadcomUpgrade ocfs2-kmp-preemptUpgrade kernel-default-develUpgrade kernel-preempt-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-debug-develUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-preemptUpgrade dtb-socionextUpgrade dtb-amdUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-optionalUpgrade dlm-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-source-vanillaUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-macrosUpgrade dtb-renesasUpgrade kernel-debug-livepatch-develUpgrade kernel-docs-htmlUpgrade gfs2-kmp-preemptUpgrade kernel-vanilla-livepatch-develUpgrade dtb-freescale | Aug 9, 2024 | Oct 2, 2020 |
| Ubuntu | — | Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04Upgrade linux-image-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-oemUpgrade linux-image-5.4.0-1010-ibmUpgrade linux-image-azureUpgrade linux-image-5.4.0-1059-oracleUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-5.4.0-92-generic-lpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-raspiUpgrade linux-image-5.11.0-34-generic-lpaeUpgrade linux-image-5.11.0-1017-raspi-nolpaeUpgrade linux-image-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1023-bluefieldUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.11.0-1015-kvmUpgrade linux-image-5.11.0-34-lowlatencyUpgrade linux-image-oem-osp1Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.11.0-1017-oracleUpgrade linux-image-genericUpgrade linux-image-ibmUpgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-raspi2Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.11.0-34-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1029-gkeopUpgrade linux-image-5.4.0-92-lowlatencyUpgrade linux-image-5.11.0-1017-raspiUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1065-azureUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.4.0-1057-gkeUpgrade linux-image-5.4.0-1048-raspiUpgrade linux-image-5.11.0-34-generic-64kUpgrade linux-image-5.8.0-1043-azureUpgrade linux-image-5.11.0-1017-awsUpgrade linux-image-5.4.0-1051-kvmUpgrade linux-image-5.11.0-1018-gcpUpgrade linux-image-5.10.0-1049-oemUpgrade linux-image-raspi-nolpaeUpgrade linux-image-bluefieldUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-92-genericUpgrade linux-image-virtualUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-gke-5.4Upgrade linux-image-5.11.0-1015-azureUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1059-gcp | Sep 9, 2021 | Oct 2, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 2, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub