CVE-2020-15780

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.7.7

Description An issue was discovered in the Linux kernel, specifically in drivers/acpi/acpi configfs.c, where injection of malicious ACPI tables via configfs could be used by attackers to bypass lockdown and secure boot restrictions.

Recommendations For Linux kernel versions prior to 5.7.7, update to version 5.7.7 or later to resolve the issue. As a temporary workaround, consider restricting access to configfs to minimize the risk of exploitation. Avoid using malicious ACPI tables via configfs until the issue is resolved.