CVE-2020-26541: Infoleak

Published Sep 15, 2020
·
Updated

A flaw was found in the Linux kernel in certs/blacklist.c, When signature entries for EFICERTX509GUID are contained in the Secure Boot Forbidden Signature Database, the entries are skipped. This can cause a security threat and breach system integrity, confidentiality and even lead to a denial of service problem.

Other sources

The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database (aka dbx) protection mechanism. This affects certs/blacklist.c and certs/systemkeyring.c.

Affected Software

7 affected componentsFixes available
redhat/kernel-rt<0:4.18.0-305.7.1.rt7.79.el8_4
0:4.18.0-305.7.1.rt7.79.el8_4
redhat/kernel<0:4.18.0-305.7.1.el8_4
0:4.18.0-305.7.1.el8_4
redhat/kernel<0:4.18.0-147.51.1.el8_1
0:4.18.0-147.51.1.el8_1
redhat/kernel-rt<0:4.18.0-193.60.2.rt13.112.el8_2
0:4.18.0-193.60.2.rt13.112.el8_2
redhat/kernel<0:4.18.0-193.60.2.el8_2
0:4.18.0-193.60.2.el8_2
Linux Linux kernel<=5.8.13
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-16.12.27-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade redhat/kernel-rt to a version that resolves this vulnerability.

    Fixed in 0:4.18.0-305.7.1.rt7.79.el8_4
  2. Upgrade

    Upgrade redhat/kernel to a version that resolves this vulnerability.

    Fixed in 0:4.18.0-305.7.1.el8_4
  3. Upgrade

    Upgrade redhat/kernel to a version that resolves this vulnerability.

    Fixed in 0:4.18.0-147.51.1.el8_1
  4. Upgrade

    Upgrade redhat/kernel-rt to a version that resolves this vulnerability.

    Fixed in 0:4.18.0-193.60.2.rt13.112.el8_2
  5. Upgrade

    Upgrade redhat/kernel to a version that resolves this vulnerability.

    Fixed in 0:4.18.0-193.60.2.el8_2
  6. Upgrade

    Upgrade debian/linux to a version that resolves this vulnerability.

    Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1

Event History

Sep 15, 2020
CVE Published
12:00 AM
Event
12:00 AM
Oct 2, 2020
CVE Published
via MITRE·06:14 PM
Data Sourced
via MITRE·06:14 PM
DescriptionSeverity
Oct 8, 2020
Data Sourced
via Red Hat·06:21 AM
DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Frequently Asked Questions

1

What is the severity of CVE-2020-26541?

CVE-2020-26541 is classified as a high-severity vulnerability affecting the Linux kernel.

2

How do I fix CVE-2020-26541?

To fix CVE-2020-26541, upgrade to the recommended kernel versions as listed in the advisory.

3

Which software versions are affected by CVE-2020-26541?

CVE-2020-26541 affects multiple versions of the Linux kernel, particularly versions up to 5.8.13.

4

What type of vulnerability is CVE-2020-26541?

CVE-2020-26541 is a kernel vulnerability related to the handling of EFI signature entries affecting system integrity.

5

Can CVE-2020-26541 lead to system exploitation?

Yes, CVE-2020-26541 can potentially be exploited to breach system integrity, confidentiality, or cause a denial of service.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203