Grub2 Lockdown Bypass Vulnerability Allowing Memory Dump in Red Hat Products

A vulnerability exists in Grub2 where the 'dump' command is not restricted during lockdown mode. This oversight enables users to access memory information, potentially allowing attackers to extract sensitive data such as signatures and salts from memory. This issue has been identified in multiple Red Hat Enterprise Linux versions and Red Hat OpenShift Container Platform 4.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information stored in memory, including cryptographic signatures and salts.