CVE-2022-28735

EUVD-2022-33174
The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverified code and modules to be loaded in GRUB2 breaking the secure boot trust-chain.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.7 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
canonicalCNA
6.7 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 4%
Affected Products (NVD)
VendorProductVersion
gnugrub2
2.00 ≤
𝑥
< 2.06-3
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
grub2
bookworm
2.06-13+deb12u1
fixed
bookworm (security)
2.06-13+deb12u1
fixed
bullseye
2.06-3~deb11u6
fixed
bullseye (security)
2.06-3~deb11u6
fixed
jessie
ignored
sid
2.12-5
fixed
stretch
ignored
trixie
2.12-5
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
grub2
bionic
not-affected
focal
not-affected
impish
ignored
jammy
not-affected
kinetic
not-affected
lunar
not-affected
mantic
not-affected
noble
not-affected
trusty
not-affected
xenial
not-affected
grub2-signed
bionic
Fixed 1.187.3~18.04.1
released
focal
Fixed 1.187.3~20.04.1
released
jammy
Fixed 1.187.3~22.04.1
released
kinetic
ignored
lunar
not-affected
mantic
not-affected
noble
not-affected
trusty
needs-triage
xenial
needed
grub2-unsigned
bionic
Fixed 2.06-2ubuntu14.1
released
focal
Fixed 2.06-2ubuntu14.1
released
jammy
Fixed 2.06-2ubuntu14.1
released
kinetic
ignored
lunar
not-affected
mantic
not-affected
noble
not-affected
trusty
dne
xenial
needed
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28735
https://security.netapp.com/advisory/ntap-20230825-0002/
https://www.openwall.com/lists/oss-security/2022/06/07/5
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28735
https://security.netapp.com/advisory/ntap-20230825-0002/
https://www.openwall.com/lists/oss-security/2022/06/07/5