Related Vulnerabilities: CVE-2020-27779  

The GRUB2's cutmem command does not honor Secure Boot locking. This allows an privileged attacker to remove address ranges from memory creating an opportunity to circumvent Secure Boot protections after proper triage of grub's memory layout.

Severity Medium

Remote No

Type Access restriction bypass

Description

The GRUB2's cutmem command does not honor Secure Boot locking. This allows an privileged attacker to remove address ranges from memory creating an opportunity to circumvent Secure Boot protections after proper triage of grub's memory layout.

AVG-1629 grub 2:2.04-10 2:2.04.r340.g8fcfd1e0f-1 Medium Testing

https://lists.gnu.org/archive/html/grub-devel/2021-03/msg00007.html