A new set of GRUB2 security vulnerabilities were made public today affecting its UEFI Secure Boot support. A set of eight CVEs were issued in 2020 and this year for the new issues. The issues include the possibility of specially crafted ACPI tables being loaded even if Secure Boot is active, memory corruption in GRUB's menu rendering, use-after-free in rmmod functionality, the cutmem command allowing privileged users to disable certain memory regions and in turn Secure Boot protections, arbitrary code execution even if Secure Boot is enabled, GRUB 2.05 accidentally re-introducing one of last year's vulnerabilities, and memory corruption from crafted USB device descriptors that could lead to arbitrary code execution.
Secure Boot isn't so secure
Forum rules
Do not post support questions here. Before you post read the forum rules. Topics in this forum are automatically closed 6 months after creation.
Do not post support questions here. Before you post read the forum rules. Topics in this forum are automatically closed 6 months after creation.
-
Moonstone Man
- Level 16
- Posts: 6054
- Joined: Mon Aug 27, 2012 10:17 pm
Secure Boot isn't so secure
https://www.phoronix.com/scan.php?page= ... oot-Issues
Last edited by LockBot on Wed Dec 28, 2022 7:16 am, edited 1 time in total.
Reason: Topic automatically closed 6 months after creation. New replies are no longer allowed.
Reason: Topic automatically closed 6 months after creation. New replies are no longer allowed.
-
DAMIEN1307
Re: Secure Boot isn't so secure
@Kadaitcha Man says,
What could possibly go wrong???...lol...lol...DAMIENSecure Boot isn't so secure
https://www.phoronix.com/scan.php?page= ... oot-Issues