CoreCVE
Back

MEDIUM

GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim

Published Jul 29, 2020

Description

GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has been imported directly into the secure boot database and the GRUB image is booted directly without the use of shim. This issue affects GRUB2 version 2.04 and prior versions.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-347

CWE-440

References (25)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner canonical
Published Jul 29, 2020
Updated Sep 17, 2024
Reserved Jul 14, 2020
Link CVE-2020-15705
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2020-15705
Red Hat
Severity Moderate
Public date Jul 29, 2020
Links CVE-2020-15705 - Bugzilla
ENISA EUVD
Assigner canonical
Published Jul 29, 2020
Updated Sep 17, 2024
Exploited since n/a
Link EUVD-2020-7691
EUVD-2020-7691