CVE-2020-26541

The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database (aka dbx) protection mechanism

Medium · published October 2, 2020

CVSS v3.1
6.5
EPSS
1%
Percentile
43.9
In the wild
Unconfirmed
What it is

The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database (aka dbx) protection mechanism. This affects certs/blacklist.c and certs/system_keyring.c.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AC:L/AV:L/A:H/C:H/I:H/PR:H/S:U/UI:R
CVSS v4.0
Not supplied
EPSS
0.00528 · 43.9th percentile
Published
2020-10-02T18:14Z
EPSS history
Timeline
  • 02 OCT 18:14Z
    The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database (aka dbx) protection mechanism
    cvelistv5