Riskcovery

CVE-2022-3675

State
Published
Severity
2.6 Low
Published
Nov 3, 2022
Updated
May 2, 2025
Reserved
Oct 24, 2022

Read the record on cve.org

Description

Fedora CoreOS supports setting a GRUB bootloader password using a Butane config. When this feature is enabled, GRUB requires a password to access the GRUB command-line, modify kernel command-line arguments, or boot non-default OSTree deployments. Recent Fedora CoreOS releases have a misconfiguration which allows booting non-default OSTree deployments without entering a password. This allows someone with access to the GRUB menu to boot into an older version of Fedora CoreOS, reverting any security fixes that have recently been applied to the machine. A password is still required to modify kernel command-line arguments and to access the GRUB command line.

Scores

CVSSScoreVectorSource
3.12.6 LowCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:Nfedora

Weaknesses

  • CWE-20 Improper Input Validation

Affected Products

ProductVersions
CoreOSFedora Project
  • testing 36.20220906.2.0 and later to before testing 36.20221030.2.0 Affected
  • next 36.20220906.1.0 and later to before next 37.20221031.1.0Affected
  • stable 36.20220820.3.0 and later to before stable 36.20221014.3.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.