fs/bfs: Disable under lockdown
authorDaniel Axtens <dja@axtens.net>
Sat, 23 Mar 2024 04:59:43 +0000 (15:59 +1100)
committerFelix Zielcke <fzielcke@z-51.de>
Thu, 3 Jul 2025 16:35:51 +0000 (18:35 +0200)
commit2c4568f7a7430882f4d06121cc4773f383341974
treeb1e8d3a4715f6f35b8adda52ee6276fc78da10e2
parent8509caedbffe6936da286c85d8ae79ddfb523ae4
fs/bfs: Disable under lockdown

The BFS is not fuzz-clean. Don't allow it to be loaded under lockdown.
This will also disable the AFS.

Fixes: CVE-2024-45778
Fixes: CVE-2024-45779
Reported-by: Nils Langius <nils@langius.de>
Signed-off-by: Daniel Axtens <dja@axtens.net>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
Gbp-Pq: Topic cve-2025-jan
Gbp-Pq: Name fs-bfs-Disable-under-lockdown.patch
grub-core/fs/bfs.c