projects / grub2.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: a63134e) | patch
commands/minicmd: Block the dump command in lockdown mode
authorB Horn <b@horn.uk>
Thu, 18 Apr 2024 19:29:39 +0000 (20:29 +0100)
committerFelix Zielcke <fzielcke@z-51.de>
Wed, 11 Jun 2025 15:42:34 +0000 (17:42 +0200)
commit81739fd9681a6548ebda104e65706e79c8576907
treed44131aeb2b7b25bcd81891e47f38d2e1ec14f07tree | snapshot
parenta63134e2ad7406c49a43be586851c4ee95cb8012commit | diff
commands/minicmd: Block the dump command in lockdown mode

The dump enables a user to read memory which should not be possible
in lockdown mode.

Fixes: CVE-2025-1118
Reported-by: B Horn <b@horn.uk>
Reported-by: Jonathan Bar Or <jonathanbaror@gmail.com>
Signed-off-by: B Horn <b@horn.uk>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
Gbp-Pq: Topic cve-2025-jan
Gbp-Pq: Name commands-minicmd-Block-the-dump-command-in-lockdown-mode.patch
grub-core/commands/minicmd.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.