GRUB2 (grub-install shim_lock regression): GRUB 2.06~rc1 reintroduced the earlier direct-boot flaw: grub-install could

Impact

GRUB 2.06~rc1 reintroduced the earlier direct-boot flaw: grub-install could produce an installation that skips shim and therefore skips kernel signature verification. Nodes you believed you had already fixed silently regress when they are rebuilt with a newer GRUB.

Who can reach it

Not directly attacker-triggered - it is a build/provisioning regression that reopens the earlier bypass. The attacker then needs only local root.

What to do

grub2 package update + reboot, and re-verify the boot chain on any node reimaged between the original BootHole fix and this one. Worth a fleet-wide audit script that asserts shim is in the chain, not a one-off check.

References

Related entries

• Insyde InsydeH2O (IhisiSmm parameter buffer, DMA TOCTOU): IHISI is Insyde's own firmware-services interfaceCVE-2022-30773 · Insyde InsydeH2O (IhisiSmm parameter buffer, DMA TOCTOU)Medium
• Insyde InsydeH2O (PnpSmm parameter buffer, DMA TOCTOU): The plug-and-play SMI handler's parameters can be swappedCVE-2022-30774 · Insyde InsydeH2O (PnpSmm parameter buffer, DMA TOCTOU)Medium
• Insyde InsydeH2O (FvbServicesRuntimeDxe input buffer, DMA TOCTOU): Firmware Volume Block services are the abstractionCVE-2022-31243 · Insyde InsydeH2O (FvbServicesRuntimeDxe input buffer, DMA TOCTOU)Medium
• Insyde InsydeH2O (PcdSmmDxe parameter buffer, DMA TOCTOU): A DMA race against the Platform Configuration Database SMICVE-2022-32266 · Insyde InsydeH2O (PcdSmmDxe parameter buffer, DMA TOCTOU)Medium
• Insyde InsydeH2O (SmmResourceCheckDxe input buffer, DMA TOCTOU): The sharpest irony in the batch: SmmResourceCheckDxeCVE-2022-32267 · Insyde InsydeH2O (SmmResourceCheckDxe input buffer, DMA TOCTOU)Medium
• Insyde InsydeH2O (FwBlockServiceSmm input buffer, DMA TOCTOU): The firmware block service is the SMM-side writerCVE-2022-33906 · Insyde InsydeH2O (FwBlockServiceSmm input buffer, DMA TOCTOU)Medium