cve/2022/CVE-2022-28735.md

CVE-2022-28735

Description

The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverified code and modules to be loaded in GRUB2 breaking the secure boot trust-chain.

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/EuroLinux/shim-review
• https://github.com/Jurij-Ivastsuk/WAXAR-shim-review
• https://github.com/NaverCloudPlatform/shim-review
• https://github.com/Rodrigo-NR/shim-review
• https://github.com/coreyvelan/shim-review
• https://github.com/ctrliq/ciq-shim-build
• https://github.com/ctrliq/shim-review
• https://github.com/lenovo-lux/shim-review
• https://github.com/neppe/shim-review
• https://github.com/ozun215/shim-review
• https://github.com/puzzleos/uefi-shim_review
• https://github.com/rhboot/shim-review
• https://github.com/vathpela/shim-review