CVE-2023-48733

An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu’s EDK2. This allows an OS-resident attacker to bypass Secure Boot.

Date published : 2024-02-14

https://bugs.launchpad.net/ubuntu/+source/edk2/+bug/2040137

https://bugs.launchpad.net/ubuntu/+source/lxd/+bug/2040139