CVE-2025-1272: Kernel: secure boot does not automatically enable kernel lockdown

Description

The Linux Kernel lockdown mode for kernel versions starting on 6.12 and above for Fedora Linux has the lockdown mode disabled without any warning. This may allow an attacker to gain access to sensitive information such kernel memory mappings, I/O ports, BPF and kprobes. Additionally unsigned modules can be loaded, leading to execution of untrusted code breaking breaking any Secure Boot protection. This vulnerability affects only Fedora Linux.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Attack vector

Local

Complexity

Low

Privileges

High

User interaction

Required

Confidentiality

High

Integrity

High

Availability

High

Scope

Changed

Exploitation

Is it being used?

Exploit prediction (EPSS)0.3% · higher than 17% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

FL

Fedora Linux · Fedora Project

6.12.4-100.fc40 before 6.12.15-100.fc40; 6.12.1-200.fc41 before 6.12.15-200.fc41 · source: vendor

RH

Red Hat Enterprise Linux 9 · Red Hat

All versions, or not specified · source: vendor