Mate Kukri

**Name of the Vulnerable Software and Affected Versions** GRUB2 (affected versions not specified) **Description** The issue is related to GRUB2 not calling the module fini functions on exit, which leads to the peimage GRUB2 module leaving UEFI system table hooks after exit. This results in a use-after-free condition and could possibly lead to secure boot bypass. The vulnerability may allow an attacker to impact the confidentiality, integrity, and availability of protected information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** LXD (affected versions not specified) **Description** The issue is related to an insecure default setting that allows the UEFI Shell in EDK2, which was left enabled in LXD. This setting enables an OS-resident attacker to bypass Secure Boot. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** EDK2 versions (affected versions not specified) **Description** The issue is related to an insecure default configuration in EDK2 that allows the UEFI Shell to be enabled, potentially permitting an OS-resident attacker to bypass Secure Boot. This could lead to unauthorized access to confidential data, disruption of data integrity, and denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.