Tracker / CVE-2020-15705
CVE-2020-15705
Medium 6.4
GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has been imported directly into the secure boot database and the GRUB image is booted directly without the use of shim. This issue affects GRUB2 version 2.04 and prior versions.
Affected products and versions
| canonical | ubuntu_linux |
|---|---|
| debian | debian_linux |
| gnu | grub2 · … → 2.04 |
| microsoft | windows_10 |
| microsoft | windows_8.1 |
| microsoft | windows_rt_8.1 |
| microsoft | windows_server_2012 |
| microsoft | windows_server_2016 |
| microsoft | windows_server_2019 |
| opensuse | leap |
| redhat | enterprise_linux |
| redhat | enterprise_linux_atomic_host |
| redhat | openshift_container_platform |
| suse | suse_linux_enterprise_server |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.