projects / grub2.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 1bec439) | patch
commands/minicmd: Block the dump command in lockdown mode
authorB Horn <b@horn.uk>
Thu, 18 Apr 2024 19:29:39 +0000 (20:29 +0100)
committerMiao Wang <shankerwangmiao@gmail.com>
Sun, 15 Feb 2026 13:50:20 +0000 (13:50 +0000)
commitd7c7096a5c089364f1cdf0fa2458bef42bd78b8e
tree22a0644119b379cf73ff26f9be86d54ab624bec0tree | snapshot
parent1bec43905f9f922cdaa52b1a55649a540a51495acommit | diff
commands/minicmd: Block the dump command in lockdown mode

The dump enables a user to read memory which should not be possible
in lockdown mode.

Fixes: CVE-2025-1118
Reported-by: B Horn <b@horn.uk>
Reported-by: Jonathan Bar Or <jonathanbaror@gmail.com>
Signed-off-by: B Horn <b@horn.uk>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
Gbp-Pq: Topic cve-2025-jan
Gbp-Pq: Name commands-minicmd-Block-the-dump-command-in-lockdown-mode.patch
grub-core/commands/minicmd.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.