In the Linux kernel, the following vulnerability has been resolved:
efi: Do not import certificates from UEFI Secure Boot for T2 Macs
On Apple T2 Macs, when Linux attempts to read the db and dbx efi variables at early boot to load UEFI Secure Boot certificates, a page fault occurs in Apple firmware code and EFI runtime services are disabled with the following logs:
[Firmware Bug]: Page fault caused by firmware at PA: 0xffffb1edc0068000 WARNING: CPU: 3 PID: 104 at arch/x86/platform/efi/quirks.c:735 efi_crash_gracefully_on_page_fault+0x50/0xf0 (Removed some logs from here) Call Trace: <TASK> page_fault_oops+0x4f/0x2c0 ? search_bpf_extables+0x6b/0x80 ? search_module_extables+0x50/0x80 ? search_exception_tables+0x5b/0x60 kernelmode_fixup_or_oops+0x9e/0x110 __bad_area_nosemaphore+0x155/0x190 bad_area_nosemaphore+0x16/0x20 do_kern_addr_fault+0x8c/0xa0 exc_page_fault+0xd8/0x180 asm_exc_page_fault+0x1e/0x30 (Removed some logs from here) ? __efi_call+0x28/0x30 ? switch_mm+0x20/0x30 ? efi_call_rts+0x19a/0x8e0 ? process_one_work+0x222/0x3f0 ? worker_thread+0x4a/0x3d0 ? kthread+0x17a/0x1a0 ? process_one_work+0x3f0/0x3f0 ? set_kthread_struct+0x40/0x40 ? ret_from_fork+0x22/0x30 </TASK> ---[ end trace 1f82023595a5927f ]--- efi: Froze efi_rts_wq and disabled EFI Runtime Services integrity: Couldn't get size: 0x8000000000000015 integrity: MODSIGN: Couldn't get UEFI db list efi: EFI Runtime Services are disabled! integrity: Couldn't get size: 0x8000000000000015 integrity: Couldn't get UEFI dbx list integrity: Couldn't get size: 0x8000000000000015 integrity: Couldn't get mokx list integrity: Couldn't get size: 0x80000000
So we avoid reading these UEFI variables and thus prevent the crash.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-64k-debugUpgrade kernel-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-develUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-64k-debug-modulesUpgrade kernelUpgrade kernel-debug-modules-extraUpgrade kernel-64kUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-coreUpgrade kernel-rt-64k-develUpgrade kernel-64k-coreUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-coreUpgrade rtlaUpgrade kernel-rt-64k-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-debug-coreUpgrade kernel-headersUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-64k-debugUpgrade kernel-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-64kUpgrade kernel-64k-modules-coreUpgrade kernel-rt-develUpgrade kernel-rt-64k-debug-develUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-modules-extraUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade libperfUpgrade kernel-debugUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-develUpgrade kernel-rt-64k-modules-extraUpgrade kernel-docUpgrade kernel-64k-debug-devel-matchedUpgrade perfUpgrade kernel-devel-matchedUpgrade python3-perfUpgrade kernel-rt-64k-modulesUpgrade kernel-toolsUpgrade kernel-modulesUpgrade rvUpgrade kernel-rt-debugUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-core | Nov 20, 2025 | Nov 11, 2025 |
| Debian | — | Upgrade linux | Feb 27, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Aug 13, 2025 | Aug 9, 2025 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Feb 26, 2025 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 9, 2025 | Feb 26, 2025 |
| Rocky_linux | — | Upgrade kernel-modules-coreUpgrade kernel-rt-debugUpgrade kernel-tools-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-debuginfoUpgrade rtlaUpgrade kernel-debug-develUpgrade kernel-devel-matchedUpgrade kernel-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-modulesUpgrade kernelUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-zfcpdump-modules-extraUpgrade libperfUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-debug-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-libs-develUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade rvUpgrade python3-perf-debuginfoUpgrade kernel-rtUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-uki-virt | Feb 5, 2026 | Nov 21, 2025 |
| Ubuntu | — | Upgrade linux-fipsUpgrade linux-oracle-5.4Upgrade linux-azure-5.15Upgrade linux-intel-iotgUpgrade linux-gcpUpgrade linux-ibm-5.4Upgrade linux-aws-5.4Upgrade linux-kvmUpgrade linux-riscv-5.15Upgrade linux-lowlatencyUpgrade linux-gkeUpgrade linux-gkeopUpgrade linux-oracle-5.15Upgrade linux-nvidiaUpgrade linux-raspi-5.4Upgrade linux-oracleUpgrade linux-azure-fde-5.15Upgrade linux-aws-5.15Upgrade linux-gcp-5.4Upgrade linux-bluefieldUpgrade linux-awsUpgrade linux-gcp-5.15Upgrade linux-hwe-5.4Upgrade linux-aws-fipsUpgrade linux-intel-iotg-5.15Upgrade linux-azure-5.4Upgrade linux-gcp-fipsUpgrade linux-azureUpgrade linuxUpgrade linux-hwe-5.15Upgrade linux-ibmUpgrade linux-iotUpgrade linux-raspiUpgrade linux-lowlatency-hwe-5.15Upgrade linux-realtimeUpgrade linux-azure-fips | Mar 3, 2025 | Feb 26, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 26, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub