Kernel: secure boot does not automatically enable kernel lockdown
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Fedora Project | Fedora Linux | unaffected |
|
|||||||||
| Red Hat | Red Hat Enterprise Linux 9 | affected |
|
|||||||||
| Red Hat | Red Hat Enterprise Linux 9 | affected |
|
|||||||||
| Red Hat | Red Hat Enterprise Linux 10 | unaffected | — | |||||||||
| Red Hat | Red Hat Enterprise Linux 6 | unaffected | — | |||||||||
| Red Hat | Red Hat Enterprise Linux 7 | unaffected | — | |||||||||
| Red Hat | Red Hat Enterprise Linux 7 | unaffected | — | |||||||||
| Red Hat | Red Hat Enterprise Linux 8 | unaffected | — | |||||||||
| Red Hat | Red Hat Enterprise Linux 8 | unaffected | — | |||||||||
| Red Hat | Red Hat Enterprise Linux 9 | affected | — | |||||||||
| Red Hat | Red Hat OpenShift Container Platform 4 | unaffected | — |
No data.
| Package | CPE | Advisory | Released Date |
|---|---|---|---|
| Red Hat Enterprise Linux 9 | |||
| kernel-0:5.14.0-570.12.1.el9_6 | cpe:/a:redhat:enterprise_linux:9 | RHSA-2025:6966 | 2025-05-13T00:00:00Z |
| kernel-0:5.14.0-570.12.1.el9_6 | cpe:/o:redhat:enterprise_linux:9 | RHSA-2025:6966 | 2025-05-13T00:00:00Z |
No data available yet.
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.250% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-306 |
| Type | Values Removed | Values Added |
|---|---|---|
| Title | kernel: Secure Boot does not automatically enable kernel lockdown | Kernel: secure boot does not automatically enable kernel lockdown |
| First Time appeared |
Redhat openshift
|
|
| CPEs | cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::crb cpe:/a:redhat:enterprise_linux:9::nfv cpe:/a:redhat:enterprise_linux:9::realtime cpe:/a:redhat:openshift:4 cpe:/o:redhat:enterprise_linux:10 cpe:/o:redhat:enterprise_linux:6 cpe:/o:redhat:enterprise_linux:7 cpe:/o:redhat:enterprise_linux:8 cpe:/o:redhat:enterprise_linux:9::baseos |
|
| Vendors & Products |
Redhat openshift
|
|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat
Redhat enterprise Linux |
|
| CPEs | cpe:/a:redhat:enterprise_linux:9 cpe:/o:redhat:enterprise_linux:9 |
|
| Vendors & Products |
Redhat
Redhat enterprise Linux |
| Type | Values Removed | Values Added |
|---|---|---|
| Description | No description is available for this CVE. | The Linux Kernel lockdown mode for kernel versions starting on 6.12 and above for Fedora Linux has the lockdown mode disabled without any warning. This may allow an attacker to gain access to sensitive information such kernel memory mappings, I/O ports, BPF and kprobes. Additionally unsigned modules can be loaded, leading to execution of untrusted code breaking breaking any Secure Boot protection. This vulnerability affects only Fedora Linux. |
| Type | Values Removed | Values Added |
|---|---|---|
| Title | kernel: Kernel's lockdown disable on Fedora's kernel due to a regression | kernel: Secure Boot does not automatically enable kernel lockdown |
| Type | Values Removed | Values Added |
|---|---|---|
| Description | No description is available for this CVE. | |
| Title | kernel: Kernel's lockdown disable on Fedora's kernel due to a regression | |
| References |
| |
| Metrics |
threat_severity
|
cvssV3_1
|