In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or unavailable. IMA prevents setting "ima_appraise=log" from the boot param when Secure Boot is enabled, but this does not cover cases where lockdown is used without Secure Boot. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity, Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
CVSS Details
- CVSS 3.1 Base Score: 6.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade python3-perfUpgrade bpftoolUpgrade kernel-rtUpgrade kernel-rt-modules-coreUpgrade kernel-rt-develUpgrade kernel-debug-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debugUpgrade kernel-rt-debugUpgrade kernel-toolsUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-64k-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-cross-headersUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-64kUpgrade kernel-modules-coreUpgrade kernel-debug-develUpgrade rtlaUpgrade kernel-rt-debug-kvmUpgrade kernel-docUpgrade kernel-zfcpdump-modulesUpgrade kernel-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-64k-modules-coreUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-64k-coreUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-64k-modulesUpgrade kernel-64k-devel | May 15, 2023 | May 9, 2023 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-livepatch-5.15.59-33.133Upgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.135-122.509Upgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftool-debuginfo | Sep 30, 2022 | Sep 30, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-libbpfUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-toolsUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfo | Feb 17, 2025 | Jul 19, 2022 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 15, 2023 | May 9, 2023 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 30, 2024 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jul 20, 2022 | Jul 19, 2022 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | May 15, 2023 | May 9, 2023 |
| Suse | — | Upgrade dlm-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-devel-azureUpgrade dtb-amazonUpgrade kernel-default-baseUpgrade kernel-sourceUpgrade dtb-lgUpgrade kernel-symsUpgrade kernel-64kbUpgrade kernel-azure-extraUpgrade dtb-exynosUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-default-optionalUpgrade dtb-xilinxUpgrade kernel-source-azureUpgrade kernel-macrosUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-mediatekUpgrade kernel-kvmsmall-develUpgrade dtb-armUpgrade kernel-preempt-optionalUpgrade kernel-default-develUpgrade dtb-freescaleUpgrade dtb-renesasUpgrade dtb-apmUpgrade dtb-appleUpgrade kernel-64kb-develUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-debugUpgrade ocfs2-kmp-preemptUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-preemptUpgrade kernel-obs-qaUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-preempt-livepatch-develUpgrade dtb-amdUpgrade kernel-develUpgrade kernel-docsUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-preemptUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-preemptUpgrade dtb-qcomUpgrade kselftests-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-preempt-develUpgrade kernel-docs-htmlUpgrade dtb-nvidiaUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-preemptUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade dtb-rockchipUpgrade dtb-alUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-livepatch-develUpgrade dtb-socionextUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-azureUpgrade dtb-marvellUpgrade dtb-zteUpgrade dlm-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-azure-optionalUpgrade dtb-allwinnerUpgrade dtb-alteraUpgrade kernel-preemptUpgrade kernel-rtUpgrade gfs2-kmp-defaultUpgrade kernel-preempt-extraUpgrade dtb-broadcomUpgrade kernel-azure-develUpgrade kernel-defaultUpgrade dtb-sprdUpgrade dlm-kmp-preemptUpgrade kernel-source-vanilla | Oct 26, 2022 | Aug 24, 2022 |
| Ubuntu | — | Upgrade linux-image-oem-22.04Upgrade linux-image-5.17.0-1030-oemUpgrade linux-image-oem-22.04a | Apr 21, 2023 | Apr 19, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 24, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub