CVE-2019-20908

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.4

Description An issue in the Linux kernel's drivers/firmware/efi/efi.c allows attackers to bypass lockdown or secure boot restrictions due to incorrect access permissions for the efivar ssdt ACPI variable. This could be exploited to circumvent security features.

Recommendations For Linux kernel versions prior to 5.4, update to version 5.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the efivar ssdt ACPI variable to minimize the risk of exploitation.