| Package | Affected versions | Patched versions |
|---|---|---|
| lxd | ≥ 5.0.0, < 5.21.0 | 5.21.0 |
| edk2 | ≤ 2023.11-8 |
An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass Secure Boot.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free