Riskcovery

CVE-2025-1272

Kernel: secure boot does not automatically enable kernel lockdown

State
Published
Severity
7.7 High
Published
Feb 18, 2026
Updated
Feb 26, 2026
Reserved
Feb 13, 2025

Read the record on cve.org

Description

The Linux Kernel lockdown mode for kernel versions starting on 6.12 and above for Fedora Linux has the lockdown mode disabled without any warning. This may allow an attacker to gain access to sensitive information such kernel memory mappings, I/O ports, BPF and kprobes. Additionally unsigned modules can be loaded, leading to execution of untrusted code breaking breaking any Secure Boot protection. This vulnerability affects only Fedora Linux.

Scores

CVSSScoreVectorSource
3.17.7 HighCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:Hfedora

Weaknesses

  • CWE-306 Missing Authentication for Critical Function

Affected Products

ProductVersions
Fedora LinuxFedora Project
  • 6.12.4-100.fc40 to before 6.12.15-100.fc40Affected
  • 6.12.1-200.fc41 to before 6.12.15-200.fc41Affected
Red Hat Enterprise Linux 9Red Hat
  • 0:5.14.0-570.12.1.el9_6 and laterNot affected
Red Hat Enterprise Linux 9Red Hat
  • 0:5.14.0-570.12.1.el9_6 and laterNot affected
Red Hat Enterprise Linux 10Red Hat
    Red Hat Enterprise Linux 6Red Hat
      Red Hat Enterprise Linux 7Red Hat
        Red Hat Enterprise Linux 7Red Hat
          Red Hat Enterprise Linux 8Red Hat
            Red Hat Enterprise Linux 8Red Hat
              Red Hat Enterprise Linux 9Red Hat
                Red Hat OpenShift Container Platform 4Red Hat

                  References

                  Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.