In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or unavailable. IMA prevents setting "ima_appraise=log" from the boot param when Secure Boot is enabled, but this does not cover cases where lockdown is used without Secure Boot. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity, Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-perfUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rtUpgrade bpftoolUpgrade kernel-64k-debugUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade kernel-64k-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-rt-debug-coreUpgrade kernel-rt-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-toolsUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-kvmUpgrade kernel-develUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-develUpgrade kernel-64k-devel-matchedUpgrade kernel-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-cross-headersUpgrade kernel-debug-modules-extraUpgrade kernel-modulesUpgrade rtlaUpgrade kernel-64k-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-rt-coreUpgrade kernel-64kUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-devel-matchedUpgrade kernelUpgrade kernel-debugUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-docUpgrade kernel-uki-virtUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-modules-core | May 15, 2023 | May 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.59-33.133Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.135-122.509Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64 | Sep 30, 2022 | Sep 30, 2022 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-develUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade bpftool-debuginfo | Feb 17, 2025 | Jul 19, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 15, 2023 | May 9, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 30, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jul 20, 2022 | Jul 19, 2022 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | May 15, 2023 | May 9, 2023 |
| Suse | — | Upgrade kernel-debug-develUpgrade kernel-devel-azureUpgrade kernel-debugUpgrade kernel-kvmsmall-develUpgrade dtb-hisiliconUpgrade dtb-lgUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-extraUpgrade ocfs2-kmp-preemptUpgrade kernel-64kbUpgrade kselftests-kmp-64kbUpgrade dtb-renesasUpgrade kernel-develUpgrade dtb-freescaleUpgrade kernel-preempt-livepatch-develUpgrade dtb-apmUpgrade kernel-obs-qaUpgrade dtb-amdUpgrade kernel-symsUpgrade dtb-amazonUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-default-baseUpgrade cluster-md-kmp-preemptUpgrade dtb-appleUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-preempt-optionalUpgrade dtb-exynosUpgrade kernel-azure-extraUpgrade kernel-source-azureUpgrade kernel-default-livepatch-develUpgrade kernel-default-develUpgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-preemptUpgrade dtb-armUpgrade dtb-amlogicUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-sourceUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmallUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade dtb-mediatekUpgrade gfs2-kmp-64kbUpgrade dtb-marvellUpgrade kernel-azure-optionalUpgrade kernel-syms-azureUpgrade kernel-azureUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-preemptUpgrade dlm-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-preempt-extraUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade kernel-defaultUpgrade dlm-kmp-preemptUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade dtb-alUpgrade dtb-socionextUpgrade reiserfs-kmp-64kbUpgrade dtb-nvidiaUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-debug-livepatch-develUpgrade dtb-qcomUpgrade dlm-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-source-vanillaUpgrade kernel-preempt-develUpgrade kernel-preemptUpgrade kselftests-kmp-preemptUpgrade dtb-caviumUpgrade dtb-zteUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-azure-devel | Oct 26, 2022 | Aug 24, 2022 |
| Ubuntu | — | Upgrade linux-image-5.17.0-1030-oemUpgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04a | Apr 21, 2023 | Apr 19, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 24, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub