CVE-2020-26541

Опубликовано: 02 окт. 2020

Источник: nvd

CVSS3: 6.5

CVSS2: 6.9

EPSS Низкий

Описание

The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database (aka dbx) protection mechanism. This affects certs/blacklist.c and certs/system_keyring.c.

Ссылки

https://lkml.org/lkml/2020/9/15/1871
Exploit
Vendor Advisory
https://lkml.org/lkml/2020/9/15/1871
Exploit
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия до 5.8.13 (включая)

EPSS

Процентиль: 5%

0.00024

Низкий

6.5 Medium

CVSS3

6.9 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2020-26541

CVSS3: 6.5

ubuntu

больше 4 лет назад

The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database (aka dbx) protection mechanism. This affects certs/blacklist.c and certs/system_keyring.c.

CVE-2020-26541

CVSS3: 6.5

redhat

почти 5 лет назад

The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database (aka dbx) protection mechanism. This affects certs/blacklist.c and certs/system_keyring.c.

CVE-2020-26541

CVSS3: 6.5

msrc

больше 4 лет назад

Описание отсутствует

CVE-2020-26541

CVSS3: 6.5

debian

больше 4 лет назад

The Linux kernel through 5.8.13 does not properly enforce the Secure B ...

GHSA-f823-qm69-5873

github

около 3 лет назад

The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database (aka dbx) protection mechanism. This affects certs/blacklist.c and certs/system_keyring.c.

EPSS

Процентиль: 5%

0.00024

Низкий

6.5 Medium

CVSS3

6.9 Medium

CVSS2

Дефекты

NVD-CWE-Other