[From nobody Thu Sep 24 11:37:10 2026
Received: (at submit) by bugs.debian.org; 22 Sep 2026 20:54:18 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-9.0 required=4.0 tests=BAYES_00,DKIM_SIGNED,
 DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA,PGPSIGNATURE,
 RCVD_IN_DNSWL_MED,SPF_HELO_NONE,SPF_PASS autolearn=ham
 autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 13; hammy, 145; neutral, 33; spammy,
 0. spammytokens: hammytokens:0.000-+--H*ct:pgp-sha256,
 0.000-+--XDebbugsCc, 0.000-+--X-Debbugs-Cc, 0.000-+--H*Ad:N*Bug,
 0.000-+--HTo:N*Debian
Return-path: <steve@einval.com>
Received: from cheddar.halon.org.uk ([93.93.131.118]:41948)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from <steve@einval.com>) id 1x97VJ-002F2v-08
 for submit@bugs.debian.org; Tue, 22 Sep 2026 20:54:18 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=einval.com; 
 s=default;
 h=Content-Type:MIME-Version:Message-ID:Subject:To:From:Date:From:
 Reply-To:Subject:Cc:Content-Transfer-Encoding:Content-ID:Content-Description:
 In-Reply-To:References:X-Debbugs-Cc;
 bh=40XqfvLqAp9PQtsdzturr2Tl5csmvBuzddMLZkb64Lw=; b=giQFXy2Pdj8HPylLIwwEVuFCrH
 7M7Nmj2ozBIa3jT/eelt9OumuS3xRJcsPjU469H+R+4AzGO+4Y381vW6SVogcAGA0C3ud3CpXrSiI
 2IIIMDeHm4m8kWB0mhpei7JK/WO62m1c5t+TUxH1QUPN++dfx2CkKqW38dVeShxM5v9x6mP+RgTl7
 wOO0EoQsn43RDpCd2D4cSeCWWxjdo7XKDnblYQHC5/d3HB3mAcZZkUko77VAfs0PPS58JLK36B40k
 wNqRlBham8r11UuOxJoKrMuv37vjibbE2WgnkDNRWTgTsCEEwqmlXKupBibAue00RkrKL/kIKfeY/
 Jj7ZudNA==;
Received: from bsmtp by cheddar.halon.org.uk with local-bsmtp (Exim 4.96)
 (envelope-from <steve@einval.com>) id 1x97VC-00GAxR-0s;
 Tue, 22 Sep 2026 21:54:10 +0100
Received: from steve by tack.einval.org with local (Exim 4.98.2)
 (envelope-from <steve@einval.com>) id 1x97Up-00000003wOq-3w2f;
 Tue, 22 Sep 2026 21:53:47 +0100
Date: Tue, 22 Sep 2026 21:53:47 +0100
From: Steve McIntyre <steve@einval.com>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: grub-efi: serial-MMIO secure boot bypass
Message-ID: <20260922205347.GA936031@tack.einval.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature"; boundary="J/dobhs11T7y2rNN"
Content-Disposition: inline
X-Reportbug-Version: 13.2.0
X-attached: unknown
User-Agent: Mutt/1.10.1 (2018-07-13)
Delivered-To: submit@bugs.debian.org


--J/dobhs11T7y2rNN
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Source: grub2
Version: 2.14-3
Severity: serious
Tags: security
X-Debbugs-Cc: debian-efi@lists.debian.org, Debian Security Team <team@secur=
ity.debian.org>

This bug is already public due to uncoordinated disclosure in

  https://www.openwall.com/lists/oss-security/2026/09/13/5

GRUB upstream has a fix for this bug in the latest release (2.16); I'm
working on backporting this for older releases now.

--=20
Steve McIntyre, Cambridge, UK.                                steve@einval.=
com
"...In the UNIX world, people tend to interpret `non-technical user'
 as meaning someone who's only ever written one device driver." -- Daniel P=
ead

--J/dobhs11T7y2rNN
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=mV4k
-----END PGP SIGNATURE-----

--J/dobhs11T7y2rNN--
]