Vulnerability details

CVE-2025-1272

Fedora Project Fedora LinuxRed Hat Enterprise Linux 9

Kernel: secure boot does not automatically enable kernel lockdown

CVSS 3.1

7.7High

Official description

The Linux Kernel lockdown mode for kernel versions starting on 6.12 and above for Fedora Linux has the lockdown mode disabled without any warning. This may allow an attacker to gain access to sensitive information such kernel memory mappings, I/O ports, BPF and kprobes. Additionally unsigned modules can be loaded, leading to execution of untrusted code breaking breaking any Secure Boot protection. This vulnerability affects only Fedora Linux.

CVSS scores

Score	Version	Source	Vector
7.7High	3.1	CVEProject cvelistV5 (CNA) (fedora)	`CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H`

Affected products

Vendor	Product	Versions	Source
Fedora Project	Fedora Linux	6.12.1-200.fc41 ≤ v < 6.12.15-200.fc41	CVEProject cvelistV5 (CNA)
Fedora Project	Fedora Linux	6.12.4-100.fc40 ≤ v < 6.12.15-100.fc40	CVEProject cvelistV5 (CNA)
Red Hat	Red Hat Enterprise Linux 9	All	CVEProject cvelistV5 (CNA)

References and advisories

https://access.redhat.com/errata/RHSA-2025:6966 vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2025-1272 vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2345615 issue-trackingx_refsource_REDHAT

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2026-02-18
Last updated: 2026-02-26
State: Published
Assigner (CNA): fedora

Exploit prediction (EPSS)

0.25%

Probability of exploitation in 30 days

17%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: No
Exploitation: None
Technical impact: Total

Weaknesses (CWE)

CWE-306
Missing Authentication for Critical Function