PT-2025-6873 · Fedora+1 · Fedora Linux Kernel+1

Published 2025-02-13 · Updated 2026-02-18 · CVE-2025-1272

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Fedora Linux kernel versions 6.12 through 6.12.13

Description A critical flaw in the Fedora Linux kernel disables Lockdown Mode by default, potentially allowing attackers to bypass Secure Boot protections. This issue affects systems starting at version 6.12, risking system security.

Recommendations Update to version 6.12.14 to resolve the issue. As a temporary workaround, consider enabling Lockdown Mode manually until a patch is applied. Restrict access to sensitive system components to minimize the risk of exploitation.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

BDU:2026-06040

CVE-2025-1272

INFSA-2025_6966

RHSA-2025:6966

RHSA-2025_6966

Affected Products

Fedora Linux Kernel

Red Hat

References · 23

• https://linux.oracle.com/errata/ELSA-2025-6966.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-1272 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/I2UB5GEW3TAIOBGLA2FMOQZIBELKDKE3 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-1272 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-1272 · Security Note
• https://access.redhat.com/errata/RHSA-2025:6966 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-1272 · Security Note
• https://bdu.fstec.ru/vul/2026-06040 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-1272 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2025-1272 · Note
• https://access.redhat.com/security/cve/cve-2025-1272 · Note
• https://twitter.com/adriananglin/status/1892598726478197027 · Twitter Post
• https://twitter.com/techaniruddh/status/1892631956891840639 · Twitter Post
• https://twitter.com/linux_ly/status/1894053763109065143 · Twitter Post
• https://t.me/pentestingnews/56814 · Telegram Post