Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xj75-gfvf-4g86

Опубликовано: 18 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.7

Описание

The Linux Kernel lockdown mode for kernel versions starting on 6.12 and above for Fedora Linux has the lockdown mode disabled without any warning. This may allow an attacker to gain access to sensitive information such kernel memory mappings, I/O ports, BPF and kprobes. Additionally unsigned modules can be loaded, leading to execution of untrusted code breaking breaking any Secure Boot protection. This vulnerability affects only Fedora Linux.

The Linux Kernel lockdown mode for kernel versions starting on 6.12 and above for Fedora Linux has the lockdown mode disabled without any warning. This may allow an attacker to gain access to sensitive information such kernel memory mappings, I/O ports, BPF and kprobes. Additionally unsigned modules can be loaded, leading to execution of untrusted code breaking breaking any Secure Boot protection. This vulnerability affects only Fedora Linux.

EPSS

Процентиль: 0%
0.00004
Низкий

7.7 High

CVSS3

Дефекты

CWE-306

Связанные уязвимости

CVSS3: 7.7
ubuntu
около 1 месяца назад

The Linux Kernel lockdown mode for kernel versions starting on 6.12 and above for Fedora Linux has the lockdown mode disabled without any warning. This may allow an attacker to gain access to sensitive information such kernel memory mappings, I/O ports, BPF and kprobes. Additionally unsigned modules can be loaded, leading to execution of untrusted code breaking breaking any Secure Boot protection. This vulnerability affects only Fedora Linux.

CVSS3: 7.7
redhat
около 1 года назад

The Linux Kernel lockdown mode for kernel versions starting on 6.12 and above for Fedora Linux has the lockdown mode disabled without any warning. This may allow an attacker to gain access to sensitive information such kernel memory mappings, I/O ports, BPF and kprobes. Additionally unsigned modules can be loaded, leading to execution of untrusted code breaking breaking any Secure Boot protection. This vulnerability affects only Fedora Linux.

CVSS3: 7.7
nvd
около 1 месяца назад

The Linux Kernel lockdown mode for kernel versions starting on 6.12 and above for Fedora Linux has the lockdown mode disabled without any warning. This may allow an attacker to gain access to sensitive information such kernel memory mappings, I/O ports, BPF and kprobes. Additionally unsigned modules can be loaded, leading to execution of untrusted code breaking breaking any Secure Boot protection. This vulnerability affects only Fedora Linux.

CVSS3: 7.7
debian
около 1 месяца назад

The Linux Kernel lockdown mode for kernel versions starting on 6.12 an ...

oracle-oval
10 месяцев назад

ELSA-2025-6966: kernel security update (MODERATE)

EPSS

Процентиль: 0%
0.00004
Низкий

7.7 High

CVSS3

Дефекты

CWE-306