The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or unavailable. IMA prevents setting "ima_appraise=log" from the boot param when Secure Boot is enabled, but this does not cover cases where lockdown is used without Secure Boot. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity, Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debugUpgrade kernel-64k-debug-modules-extraUpgrade kernelUpgrade kernel-docUpgrade kernel-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-debug-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-kvmUpgrade kernel-64k-modulesUpgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-cross-headersUpgrade kernel-uki-virtUpgrade kernel-64k-modules-coreUpgrade kernel-rt-coreUpgrade kernel-64k-coreUpgrade rtlaUpgrade kernel-zfcpdump-develUpgrade kernel-64kUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-develUpgrade kernel-debug-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-64k-debugUpgrade kernel-debug-modulesUpgrade kernel-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-uki-virtUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-develUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-64k-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-coreUpgrade python3-perf | May 15, 2023 | May 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernelUpgrade kernel-livepatch-5.10.135-122.509Upgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.59-33.133 | Sep 30, 2022 | Sep 30, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-develUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-develUpgrade python3-perfUpgrade perfUpgrade kernel-libbpfUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64 | Feb 17, 2025 | Jul 19, 2022 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 15, 2023 | May 9, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 30, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jul 20, 2022 | Jul 19, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | May 15, 2023 | May 9, 2023 |
| Suse | — | Upgrade kernel-azure-develUpgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-preemptUpgrade kernel-source-vanillaUpgrade kernel-preempt-develUpgrade dtb-alteraUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-preempt-extraUpgrade dtb-allwinnerUpgrade dlm-kmp-preemptUpgrade kernel-default-base-rebuildUpgrade dtb-socionextUpgrade ocfs2-kmp-64kbUpgrade dtb-alUpgrade dtb-zteUpgrade dtb-nvidiaUpgrade kernel-debug-livepatch-develUpgrade dtb-qcomUpgrade dtb-marvellUpgrade kselftests-kmp-preemptUpgrade kernel-rtUpgrade kernel-defaultUpgrade kernel-docs-htmlUpgrade kernel-azureUpgrade dtb-sprdUpgrade dtb-caviumUpgrade dtb-rockchipUpgrade dlm-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-syms-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-default-livepatchUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-preemptUpgrade dtb-amdUpgrade kernel-azure-extraUpgrade kernel-macrosUpgrade kselftests-kmp-64kbUpgrade kernel-debugUpgrade dtb-appleUpgrade ocfs2-kmp-preemptUpgrade cluster-md-kmp-azureUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-develUpgrade dtb-hisiliconUpgrade kernel-64kbUpgrade dlm-kmp-azureUpgrade dtb-amlogicUpgrade dtb-exynosUpgrade cluster-md-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade dtb-lgUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-symsUpgrade ocfs2-kmp-azureUpgrade kernel-preempt-livepatch-develUpgrade dtb-armUpgrade kernel-docsUpgrade dtb-freescaleUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-xilinxUpgrade kernel-source-azureUpgrade cluster-md-kmp-preemptUpgrade dtb-amazonUpgrade kernel-64kb-optionalUpgrade kernel-obs-qaUpgrade dtb-apmUpgrade kernel-default-extraUpgrade kernel-debug-develUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-preemptUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-azureUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade kernel-64kb-livepatch-develUpgrade kernel-preempt-optionalUpgrade kernel-default-optional | Oct 26, 2022 | Aug 24, 2022 |
| Ubuntu | — | Upgrade linux-image-5.17.0-1030-oemUpgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04a | Apr 21, 2023 | Apr 19, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 24, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub