Bug 1263195

Summary:	grub2: Built-in multiboot modules functioning on UEFI allow user to load non-verified code
Product:	[Other] Security Response	Reporter:	Adam Mariš <amaris>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED DUPLICATE	QA Contact:
Severity:	low	Docs Contact:
Priority:	low
Version:	unspecified	CC:	pjones, scorneli, security-response-team
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2015-11-17 09:11:26 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1262904, 1264103
Bug Blocks:	1263198

Description Adam Mariš 2015-09-15 09:58:23 UTC

A vulnerability in grub2 allowing users to load non-verified code, such as tools to circumvent Secure Boot was reported. The problem raised from introducing this commit:

http://pkgs.devel.redhat.com/cgit/rpms/grub2/commit/?h=rhel-7.2&id=909ac684df7a662e7afd9d45d546ad97d363d197

Multiboot a multiboot2 modules remained built-in, that should not function on UEFI systems, but there is a prevention missing. Non-verified code can be loaded from boot menu if there's no password set, or in the config file if gained root privileges.

For reproducing the issue, see Bug #1262904.

Comment 2 Stefan Cornelius 2015-11-17 09:11:26 UTC


*** This bug has been marked as a duplicate of bug 1264103 ***