CVE-2023-49721

Publication date

2024-02-14 21:57:40

Family

canonical

State

PUBLISHED

Description

An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass Secure Boot.