Description
The Linux kernel, as used in Red Hat Enterprise Linux 7.2 and Red Hat Enterprise MRG 2 and when booted with UEFI Secure Boot enabled, allows local users to bypass intended Secure Boot restrictions and execute untrusted code by appending ACPI tables to the initrd.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1329653 ↗
- https://github.com/mjg59/linux/commit/a4a5ed2835e8ea042868b7401dced3f517cafa76 ↗
- http://www.openwall.com/lists/oss-security/2016/09/22/4 ↗
- http://rhn.redhat.com/errata/RHSA-2016-2584.html ↗
- http://rhn.redhat.com/errata/RHSA-2016-2574.html ↗
- http://www.securityfocus.com/bid/93114 ↗