CLEANSTART-2024-XM31676

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-XM31676.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2024-XM31676
Upstream
Published
2026-10-31T14:15:19Z
Modified
2026-10-31T16:02:58Z
Severity
  • 6.4 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed
Details

Security vulnerability affects the grub package. GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed.

References

Affected packages

CleanStart / grub

Package

Name
grub
Purl
pkg:apk/cleanstart/grub

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.06-r0

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2024/CLEANSTART-2024-XM31676.json"