In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled or unavailable. IMA prevents setting "ima_appraise=log" from the boot param when Secure Boot is enabled, but this does not cover cases where lockdown is used without Secure Boot. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity, Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://git.kernel.org/linus/543ce63b664e2c2f9533d089a4664b559c3e6b5b | Broken Link |
| https://linux.oracle.com/cve/CVE-2022-21505.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
18 Jun 2025, 20:42
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:oracle:linux:8:-:*:*:*:*:*:* cpe:2.3:o:oracle:linux:9:-:*:*:*:*:*:* cpe:2.3:o:oracle:linux:7:-:*:*:*:*:*:* |
|
| References | () https://linux.oracle.com/cve/CVE-2022-21505.html - Vendor Advisory | |
| References | () https://git.kernel.org/linus/543ce63b664e2c2f9533d089a4664b559c3e6b5b - Broken Link | |
| First Time |
Oracle linux
Oracle |
27 Dec 2024, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
24 Dec 2024, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-12-24 19:15
Updated : 2025-06-18 20:42
NVD link : CVE-2022-21505
Mitre link : CVE-2022-21505
JSON object : View
Products Affected
oracle
- linux
CWE
No CWE.