shim-review

このリポジトリは、shim への署名依頼をレビューするためのものです。レビューを依頼するには: このリポジトリをクローンしてください（できればフォークしてください） 以下のテンプレートを編集してください 署名対象の shim.efi を追加してください ビルドログを追加してください 必要となる可能性のある追加のバイナリ/証明書/SHA256 ハッシュを追加してください それらをすべてコミットしてください "myorg-shim-arch-YYYYMMDD" 形式のタグを付けてください GitHub にプッシュしてください...

ShimMe

ShimMe DEFCON 32 トーク “SHIM me what you got - Manipulating Shim and Office for Code Injection” のツール群 Office Injector - OfficeClickToRun サービスの RPC メソッドを呼び出して、タスク スケジューラ サービスが起動した、NT AUTHORITY\SYSTEM として実行中の一時停止プロセスに DLL を注入し、管理者から SYSTEM への権限昇格を実現します。 Shim Injector - 非公開の shim...

CVE-2026-8863

CVE-2026-8863 CVE-2026-8863의 영향을 받는 서명된 UEFI Secure Boot shim 바이너리 모음으로, 각 이미지의 내장 shim 버전, Authenticode 서명자 및 폐기 해시를 포함합니다. 바이트 단위로 동일한 서명된 shim을 제공하는 릴리스는 하나의 행으로 통합됩니다 — 하나의 Authenticode 해시는 해당 해시를 담고 있는 릴리스 수와 관계없이 하나의 dbx 항목입니다. 자세한 내용은 제 블로그를 확인하세요. 개요...

EUVD-2026-59485

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject sleepable BPFLSMCGROUP programs at load time The cgroup shim runs under rcureadlockdontmigrate, so we should not attach any sleepable BPF programs there. Add support to the verifier to explicitly reject attempts to lo...

CVE-2026-74338 bpf: Reject sleepable BPF_LSM_CGROUP programs at load time

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject sleepable BPFLSMCGROUP programs at load time The cgroup shim runs under rcureadlockdontmigrate, so we should not attach any sleepable BPF programs there. Add support to the verifier to explicitly reject attempts to lo...

CVE-2026-53970

ZeroBrew version 0.3.1 and prior contains a missing integrity verification vulnerability in the Ruby compatibility shim that allows network attackers to execute arbitrary code by substituting malicious content at formula resource or URL-based patch URLs without checksum validation. Attackers can...

CVE-2026-53970

ZeroBrew 0.3.1 and earlier is affected by a missing integrity verification vulnerability in the Ruby compatibility shim (shim.rb). An attacker could substitute malicious content at formula resources or URL-based patch URLs without checksum validation, allowing remote code execution when downloads...

EUVD-2026-58684

ZeroBrew version 0.3.1 and prior contains a missing integrity verification vulnerability in the Ruby compatibility shim that allows network attackers to execute arbitrary code by substituting malicious content at formula resource or URL-based patch URLs without checksum validation. Attackers can...

Linux Distros Unpatched Vulnerability : CVE-2026-19411

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of...

DEBIAN-CVE-2026-19411

A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader...

CVE-2026-19411

A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader...

CVE-2026-19411

A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader...

UBUNTU-CVE-2026-19411

A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader...

CVE-2026-19411

The CVE-2026-19411 entry describes a NULL pointer dereference in the shim application of the dp.c library. The vulnerability occurs in the function is_removable_media_path() when devicepathtostr() returns NULL, potentially allowing a denial of service on systems that rely on the shim for the UEFI...

EUVD-2026-55827

A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader...

CVE-2026-19411

A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader...

CVE-2026-19411 Shim/dp.c library: null-pointer dereference in is_removable_media_path() when devicepathtostr() returns null

A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader...

CVE-2026-19411

A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader. Mitigation The code could be modified to include NULL pointer...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: bpf: Fixed a UAF issue in bpftrampolinelinkcgroupshim. The root cause of this bug is that when bpflinkput reduces the refcount of shimlink-link.link to zero, the resource is considered released, but it may still be referenced via...

PT-2026-69969

Name of the Vulnerable Software and Affected Versions shim application affected versions not specified Description A NULL pointer vulnerability exists in the dp.c library of the shim application. This issue occurs due to a missing NULL pointer check, which could allow an attacker to cause a denia...