CVE-2020-26541
Summary
| CVE | CVE-2020-26541 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-10-02 19:15:00 UTC |
| Updated | 2020-10-05 02:17:00 UTC |
| Description | The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database (aka dbx) protection mechanism. This affects certs/blacklist.c and certs/system_keyring.c. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Linux | Linux Kernel | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| LKML: Eric Snowberg: [PATCH v4] certs: Add EFI_CERT_X509_GUID support for dbx entries | MISC | lkml.org | Exploit, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 159286 Oracle Enterprise Linux Security Update for kernel (ELSA-2021-2570)
- 198491 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5070-1)
- 198533 Ubuntu Security Notification for Linux kernel (OEM) Vulnerabilities (USN-5106-1)
- 198548 Ubuntu Security Notification for Linux kernel (Azure) Vulnerabilities (USN-5120-1)
- 198618 Ubuntu Security Notification for Linux kernel Vulnerabilities (USN-5210-1)
- 239458 Red Hat Update for kernel-rt (RHSA-2021:2599)
- 239467 Red Hat Update for kernel (RHSA-2021:2570)
- 239483 Red Hat Update for kernel (RHSA-2021:2666)
- 239501 Red Hat Update for kernel-rt (RHSA-2021:2719) (Sequoia)
- 239502 Red Hat Update for kernel (RHSA-2021:2718) (Sequoia)
- 353147 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.4-2022-004
- 353158 Amazon Linux Security Advisory for kernel : ALAS2KERNEL-5.10-2022-002
- 671380 EulerOS Security Update for kernel (EulerOS-SA-2022-1292)
- 752242 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2104-1)
- 752250 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2111-1)
- 752276 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2173-1)
- 752340 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2377-1)
- 752349 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2382-1)
- 752354 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2393-1)
- 752360 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2407-1)
- 753091 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2172-1)
- 753296 SUSE Enterprise Linux Security Update for the Linux Kernel (SUSE-SU-2022:2177-1)
- 900098 CBL-Mariner Linux Security Update for kernel 5.4.91
- 903706 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (3469)
- 940091 AlmaLinux Security Update for kernel (ALSA-2021:2570)
- 960056 Rocky Linux Security Update for kernel (RLSA-2021:2570)