CVE-2023-5342

Shim: expired secure boot certificate

State: Published
Severity: 4.1 Medium
Published: Aug 15, 2025
Updated: Aug 15, 2025
Reserved: Oct 2, 2023

Description

The Fedora Secure Boot CA certificate shipped with shim in Fedora was expired which could lead to old or invalid signed boot components being loaded.

Scores

CVSS	Score	Vector	Source
3.1	4.1 Medium	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N	fedora

Weaknesses

CWE-324 Use of a Key Past its Expiration Date

Affected Products

Product	Versions
shim-x64	15.6-2 to before 15.8-2Affected
Red Hat Enterprise Linux 10Red Hat
Red Hat Enterprise Linux 7Red Hat
Red Hat Enterprise Linux 8Red Hat
Red Hat Enterprise Linux 9Red Hat

References

https://access.redhat.com/security/cve/CVE-2023-5342vdb-entry
https://bodhi.fedoraproject.org/updates/FEDORA-2024-2aa28a4cfc
https://bugzilla.redhat.com/show_bug.cgi?id=2198977
RHBZ#2388707issue-tracking

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.