CVE-2020-26541

Does not enforce the Secure Boot Forbidden Signature Database (aka dbx) protection mechanism

References

• https://lkml.org/lkml/2020/9/15/1871
• https://lore.kernel.org/lkml/20200916004927.64276-1-eric.snowberg@oracle.com/
• https://lore.kernel.org/lkml/2660556.1610545213@warthog.procyon.org.uk/

Notes

 bwh> This is only relevant to kernel versions that support the
 bwh> UEFI Secure Boot key store and/or are themselves signed.
 carnil> The commit adds a new config option SYSTEM_REVOCATION_LIST to
 carnil> enable the facility.

Bugs

Status