The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
efi: Do not import certificates from UEFI Secure Boot for T2 Macs
On Apple T2 Macs, when Linux attempts to read the db and dbx efi variables at early boot to load UEFI Secure Boot certificates, a page fault occurs in Apple firmware code and EFI runtime services are disabled with the following logs:
[Firmware Bug]: Page fault caused by firmware at PA: 0xffffb1edc0068000 WARNING: CPU: 3 PID: 104 at arch/x86/platform/efi/quirks.c:735 efi_crash_gracefully_on_page_fault+0x50/0xf0 (Removed some logs from here) Call Trace: <TASK> page_fault_oops+0x4f/0x2c0 ? search_bpf_extables+0x6b/0x80 ? search_module_extables+0x50/0x80 ? search_exception_tables+0x5b/0x60 kernelmode_fixup_or_oops+0x9e/0x110 __bad_area_nosemaphore+0x155/0x190 bad_area_nosemaphore+0x16/0x20 do_kern_addr_fault+0x8c/0xa0 exc_page_fault+0xd8/0x180 asm_exc_page_fault+0x1e/0x30 (Removed some logs from here) ? __efi_call+0x28/0x30 ? switch_mm+0x20/0x30 ? efi_call_rts+0x19a/0x8e0 ? process_one_work+0x222/0x3f0 ? worker_thread+0x4a/0x3d0 ? kthread+0x17a/0x1a0 ? process_one_work+0x3f0/0x3f0 ? set_kthread_struct+0x40/0x40 ? ret_from_fork+0x22/0x30 </TASK> ---[ end trace 1f82023595a5927f ]--- efi: Froze efi_rts_wq and disabled EFI Runtime Services integrity: Couldn't get size: 0x8000000000000015 integrity: MODSIGN: Couldn't get UEFI db list efi: EFI Runtime Services are disabled! integrity: Couldn't get size: 0x8000000000000015 integrity: Couldn't get UEFI dbx list integrity: Couldn't get size: 0x8000000000000015 integrity: Couldn't get mokx list integrity: Couldn't get size: 0x80000000
So we avoid reading these UEFI variables and thus prevent the crash.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perfUpgrade kernel-docUpgrade kernel-modulesUpgrade kernel-rt-64k-modulesUpgrade kernel-devel-matchedUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-uki-virtUpgrade kernel-debug-uki-virtUpgrade kernel-rt-64kUpgrade kernel-rt-coreUpgrade kernel-rt-debugUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade rvUpgrade kernel-64k-modules-extraUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rtUpgrade kernel-rt-64k-modules-extraUpgrade kernel-debugUpgrade kernel-tools-libs-develUpgrade libperfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-rt-64k-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-modulesUpgrade kernel-64kUpgrade kernel-debug-modules-coreUpgrade kernelUpgrade rtlaUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-coreUpgrade kernel-64k-develUpgrade kernel-rt-64k-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64k-debugUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-develUpgrade kernel-cross-headersUpgrade kernel-rt-debug-coreUpgrade kernel-headersUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-64k-debug | Nov 20, 2025 | Nov 11, 2025 |
| Debian | — | Upgrade linux | Feb 27, 2025 | Feb 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Aug 13, 2025 | Aug 9, 2025 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Feb 26, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 9, 2025 | Feb 26, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-modules-coreUpgrade perfUpgrade kernel-rt-debug-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-develUpgrade kernel-toolsUpgrade kernel-rt-debuginfoUpgrade kernel-uki-virtUpgrade python3-perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-debug-debuginfoUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade rvUpgrade perf-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-debuginfo-common-s390xUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-zfcpdumpUpgrade kernel-debug-uki-virtUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade rtlaUpgrade kernel-rt-debugUpgrade kernel-devel-matchedUpgrade kernel-rt-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-tools-libsUpgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade python3-perfUpgrade libperfUpgrade kernel-rt-modules-extraUpgrade kernel-develUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-coreUpgrade kernel-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debuginfo | Feb 5, 2026 | Nov 21, 2025 |
| Ubuntu | — | Upgrade linux-aws-fipsUpgrade linux-ibmUpgrade linux-azureUpgrade linux-hwe-5.15Upgrade linux-gcp-fipsUpgrade linux-hwe-5.4Upgrade linux-intel-iotg-5.15Upgrade linux-gcp-5.15Upgrade linux-azure-5.4Upgrade linuxUpgrade linux-lowlatency-hwe-5.15Upgrade linux-awsUpgrade linux-azure-fipsUpgrade linux-iotUpgrade linux-realtimeUpgrade linux-raspiUpgrade linux-bluefieldUpgrade linux-ibm-5.4Upgrade linux-fipsUpgrade linux-nvidiaUpgrade linux-gcp-5.4Upgrade linux-oracle-5.4Upgrade linux-azure-fde-5.15Upgrade linux-gkeopUpgrade linux-gkeUpgrade linux-raspi-5.4Upgrade linux-lowlatencyUpgrade linux-intel-iotgUpgrade linux-aws-5.4Upgrade linux-azure-5.15Upgrade linux-gcpUpgrade linux-oracleUpgrade linux-oracle-5.15Upgrade linux-kvmUpgrade linux-aws-5.15Upgrade linux-riscv-5.15 | Mar 3, 2025 | Feb 26, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 26, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub