CVE-2022-28735

The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverified code and modules to be loaded in GRUB2 breaking the secure boot trust-chain.

References

Affected packages

Git /

Affected ranges

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-28735.json"

unresolved_ranges

[
    {
        "events":  [
            {
                "introduced":  "2.00"
            },
            {
                "fixed":  "2.06-3"
            }
        ]
    }
]