Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2022-28735

Description

The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverified code and modules to be loaded in GRUB2 breaking the secure boot trust-chain.

POC

Reference

No PoCs from references.

Github

- https://github.com/ARPSyndicate/cvemon

- https://github.com/EuroLinux/shim-review

- https://github.com/Fortinetofficial/shim-review

- https://github.com/Jurij-Ivastsuk/WAXAR-shim-review

- https://github.com/NaverCloudPlatform/shim-review

- https://github.com/Rodrigo-NR/shim-review

- https://github.com/baramundisoftware/ShimReview_2024

- https://github.com/coreyvelan/shim-review

- https://github.com/ctrliq/ciq-shim-build

- https://github.com/ctrliq/shim-review

- https://github.com/jsegitz/shim-review-nonfork

- https://github.com/lenovo-lux/shim-review

- https://github.com/neppe/shim-review

- https://github.com/ozun215/shim-review

- https://github.com/puzzleos/uefi-shim_review

- https://github.com/rhboot/shim-review

- https://github.com/vathpela/shim-review

- https://github.com/zeetim/shim-review