CVE-2020-15780

An issue was discovered in drivers/acpi/acpi_configfs.c in the Linux kernel before 5.7.7. Injection of malicious ACPI tables via configfs could be used by attackers to bypass lockdown and secure boot restrictions, aka CID-75b0cea7bf30.

CVSS v3.1

6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

1.31% chance of exploitation in the next 30 days, 69th percentile

Published

2020-07-15

Updated

2024-08-04

Proof-of-concept exploits (1)

• Annavid/CVE-2020-15780-exploit0★ · 2023-12-27

References

• CVE Record
• NVD entry

Related

• CVE-2019-20908
• CVE-2020-15778
• CVE-2020-15806
• CVE-2020-15718
• CVE-2020-15807
• CVE-2020-15716