VulnerabilityDeferred

CVE-2025-1272

This may allow an attacker to gain access to sensitive information such kernel memory mappings, I/O ports, BPF and kprobes.

HIGH 7.7EPSS 0.23%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.23%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

The Linux Kernel lockdown mode for kernel versions starting on 6.12 and above for Fedora Linux has the lockdown mode disabled without any warning. This may allow an attacker to gain access to sensitive information such kernel memory mappings, I/O ports, BPF and kprobes. Additionally unsigned modules can be loaded, leading to execution of untrusted code breaking breaking any Secure Boot protection. This vulnerability affects only Fedora Linux.

CVSS 3.1: 7.7 HIGHCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
EPSS: 0.23% probability · 14th percentile
CISA KEV: Not listed
Weakness: CWE-306
Source: patrick@puiterwijk.org

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.