EDK2 OVMF Secure Boot Bypass Vulnerability Allowing Arbitrary Command Execution

A vulnerability in the EDK2 OVMF package prior to version 202502 allows for a bypass of the Secure Boot mechanism in direct boot mode. When Secure Boot is enabled, the DxeImageVerification process verifies the signature of the Linux kernel before it is loaded. However, if the signature is not recognized, DxeImageVerification denies access and the system falls back to a legacy loader, bypassing Secure Boot. This vulnerability could be exploited to alter control flow, potentially leading to arbitrary command execution.

Impact

Exploitation of this vulnerability could bypass Secure Boot, allowing unauthorized code to be executed with elevated privileges.

Remediation

Users can upgrade to EDK2 OVMF version 202505 or later to address this vulnerability.