CVE-2025-1272

HIGH

7.7

Beschreibung

The Linux Kernel lockdown mode for kernel versions starting on 6.12 and above for Fedora Linux has the lockdown mode disabled without any warning. This may allow an attacker to gain access to sensitive information such kernel memory mappings, I/O ports, BPF and kprobes. Additionally unsigned modules can be loaded, leading to execution of untrusted code breaking breaking any Secure Boot protection. This vulnerability affects only Fedora Linux.

CVE Details

CVSS v3.1 Bewertung7.7

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

AngriffsvektorLOCAL

KomplexitatLOW

Erforderliche PrivilegienHIGH

BenutzerinteraktionREQUIRED

Veroffentlicht2/18/2026

Zuletzt geandert2/26/2026

Quellenvd

Honeypot-Sichtungen0

Schwachen (CWE)

CWE-306

Referenzen

https://access.redhat.com/errata/RHSA-2025:6966(patrick@puiterwijk.org)

https://access.redhat.com/security/cve/CVE-2025-1272(patrick@puiterwijk.org)

https://bugzilla.redhat.com/show_bug.cgi?id=2345615(patrick@puiterwijk.org)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.