CVE-2020-15705
GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim
- State
- Published
- Severity
- 6.4 Medium
- Published
- Jul 29, 2020
- Updated
- Sep 17, 2024
- Reserved
- Jul 14, 2020
Description
GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has been imported directly into the secure boot database and the GRUB image is booted directly without the use of shim. This issue affects GRUB2 version 2.04 and prior versions.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.4 Medium | CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H | canonical |
Weaknesses
- CWE-347 Improper Verification of Cryptographic Signature
Affected Products
| Product | Versions |
|---|---|
grub2 in UbuntuUbuntu |
|
References
- https://www.eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/
- https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/GRUB2SecureBootBypassvendor-advisory
- http://ubuntu.com/security/notices/USN-4432-1vendor-advisory
- https://www.debian.org/security/2020-GRUB-UEFI-SecureBootvendor-advisory
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200011
- https://access.redhat.com/security/vulnerabilities/grub2bootloadervendor-advisory
- https://www.suse.com/c/suse-addresses-grub2-secure-boot-issue/vendor-advisory
- https://www.suse.com/support/kb/doc/?id=000019673vendor-advisory
- https://www.openwall.com/lists/oss-security/2020/07/29/3
- https://lists.gnu.org/archive/html/grub-devel/2020-07/msg00034.html
- [oss-security] 20200729 multiple secure boot grub2 and linux kernel vulnerabilitiesmailing-list
- https://security.netapp.com/advisory/ntap-20200731-0008/
- USN-4432-1vendor-advisory
- openSUSE-SU-2020:1280vendor-advisory
- openSUSE-SU-2020:1282vendor-advisory
- [oss-security] 20210302 Multiple GRUB2 vulnerabilitiesmailing-list
- GLSA-202104-05vendor-advisory
- [oss-security] 20210916 Containers-optimized OS (COS) membership in the linux-distros listmailing-list
- [oss-security] 20210917 Re: Containers-optimized OS (COS) membership in the linux-distros listmailing-list
- [oss-security] 20210920 Re: Containers-optimized OS (COS) membership in the linux-distros listmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.