CVE-2022-28735

The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverified code and modules to be loaded in GRUB2 breaking the secure boot trust-chain.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.7 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
canonicalCNA
6.7 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 2%
VendorProductVersion
gnugrub2
2.00 ≤
𝑥
< 2.06-3
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
grub2
bullseye (security)
2.06-3~deb11u6
fixed
bullseye
2.06-3~deb11u6
fixed
stretch
ignored
jessie
ignored
bookworm
2.06-13+deb12u1
fixed
bookworm (security)
2.06-13+deb12u1
fixed
sid
2.12-5
fixed
trixie
2.12-5
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
grub2
noble
not-affected
mantic
not-affected
lunar
not-affected
kinetic
not-affected
jammy
not-affected
impish
ignored
focal
not-affected
bionic
not-affected
xenial
not-affected
trusty
not-affected
grub2-signed
noble
not-affected
mantic
not-affected
lunar
not-affected
kinetic
ignored
jammy
Fixed 1.187.3~22.04.1
released
focal
Fixed 1.187.3~20.04.1
released
bionic
Fixed 1.187.3~18.04.1
released
xenial
needed
trusty
needs-triage
grub2-unsigned
noble
not-affected
mantic
not-affected
lunar
not-affected
kinetic
ignored
jammy
Fixed 2.06-2ubuntu14.1
released
focal
Fixed 2.06-2ubuntu14.1
released
bionic
Fixed 2.06-2ubuntu14.1
released
xenial
needed
trusty
dne
References
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28735
https://security.netapp.com/advisory/ntap-20230825-0002/
https://www.openwall.com/lists/oss-security/2022/06/07/5
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28735
https://security.netapp.com/advisory/ntap-20230825-0002/
https://www.openwall.com/lists/oss-security/2022/06/07/5