CVE-2022-28735 log
Source |
|
Severity | Medium |
Remote | No |
Type | Insufficient validation |
Description | The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverified code and modules to be loaded in GRUB2 breaking the secure boot trust-chain. |
Group | Package | Affected | Fixed | Severity | Status | Ticket |
---|---|---|---|---|---|---|
AVG-2762 | grub | 2:2.06-5 | High | Vulnerable |