A critical vulnerability in the GRUB2 bootloader allows bypassing UEFI Secure Boot
Eight vulnerabilities have been identified in the GRUB2 bootloader. The most dangerous issue (CVE-2020-10713), codenamed BootHole, allows for the bypassing of the UEFI Secure Boot mechanism and enables the installation of unverifiable malicious software. A notable feature of this vulnerability is that simply updating GRUB2 is insufficient for resolution, as an attacker can utilize a boot medium with an old vulnerable version, certified by a digital signature. […]
