CVE-2025-1272

Kernel: secure boot does not automatically enable kernel lockdown

Published Feb 18, 2026 CVSS 3.1 · 7.7 High EPSS < 1% KEV · Not listed
Description
The Linux Kernel lockdown mode for kernel versions starting on 6.12 and above for Fedora Linux has the lockdown mode disabled without any warning. This may allow an attacker to gain access to sensitive information such kernel memory mappings, I/O ports, BPF and kprobes. Additionally unsigned modules can be loaded, leading to execution of untrusted code breaking breaking any Secure Boot protection. This vulnerability affects only Fedora Linux.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
Weaknesses CWE-306
Type Values Removed Values Added
Title kernel: Secure Boot does not automatically enable kernel lockdown Kernel: secure boot does not automatically enable kernel lockdown
First Time appeared Redhat openshift
CPEs cpe:/a:redhat:enterprise_linux:9::appstream
cpe:/a:redhat:enterprise_linux:9::crb
cpe:/a:redhat:enterprise_linux:9::nfv
cpe:/a:redhat:enterprise_linux:9::realtime
cpe:/a:redhat:openshift:4
cpe:/o:redhat:enterprise_linux:10
cpe:/o:redhat:enterprise_linux:6
cpe:/o:redhat:enterprise_linux:7
cpe:/o:redhat:enterprise_linux:8
cpe:/o:redhat:enterprise_linux:9::baseos
Vendors & Products Redhat openshift
References
Type Values Removed Values Added
First Time appeared Redhat
Redhat enterprise Linux
CPEs cpe:/a:redhat:enterprise_linux:9
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux
Type Values Removed Values Added
Description No description is available for this CVE. The Linux Kernel lockdown mode for kernel versions starting on 6.12 and above for Fedora Linux has the lockdown mode disabled without any warning. This may allow an attacker to gain access to sensitive information such kernel memory mappings, I/O ports, BPF and kprobes. Additionally unsigned modules can be loaded, leading to execution of untrusted code breaking breaking any Secure Boot protection. This vulnerability affects only Fedora Linux.
Type Values Removed Values Added
Title kernel: Kernel's lockdown disable on Fedora's kernel due to a regression kernel: Secure Boot does not automatically enable kernel lockdown
Type Values Removed Values Added
Description No description is available for this CVE.
Title kernel: Kernel's lockdown disable on Fedora's kernel due to a regression
References
Metrics threat_severity

None

cvssV3_1

{'score': 7.7, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H'}

threat_severity

Moderate

Weaknesses

Sources

Status
PUBLISHED
Assigner
fedora
Published
Updated
Feb 26, 2026, 4:18 PM
Reserved
Feb 13, 2025, 2:50 PM
Status
Deferred
Published
Feb 18, 2026, 9:16 PM
Modified
Jun 17, 2026, 8:38 AM
Severity
Moderate
Public date
Feb 13, 2025, 12:00 AM