CVE-2022-28735 log
| Source |
|
| Severity | Medium |
| Remote | No |
| Type | Insufficient validation |
| Description | The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverified code and modules to be loaded in GRUB2 breaking the secure boot trust-chain. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-2762 | grub | 2:2.06-5 | High | Vulnerable |