← All advisories

Medium severity6.7NVD Advisory· Published Feb 14, 2024· Updated Jun 17, 2026

CVE-2023-49721

CVE-2023-49721

Description

An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass Secure Boot.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

Canonical/Lxd2 versions
cpe:2.3:a:canonical:lxd:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:canonical:lxd:*:*:*:*:*:*:*:*range: >=5.0.0,<5.21.0
- (no CPE)range: 0
Tianocore/Edk2
cpe:2.3:a:tianocore:edk2:*:-:*:*:*:*:*:*
Range: <=2023.11-8
Ubuntu/edk2llm-create
Ubuntu/LXDllm-fuzzy

Patches

Vulnerability mechanics

References

4

nvd.nist.gov/vuln/detail/CVE-2023-48733nvdThird Party Advisory
bugs.launchpad.net/ubuntu/+source/edk2/+bug/2040137nvdIssue Tracking
bugs.launchpad.net/ubuntu/+source/lxd/+bug/2040139nvdIssue Tracking
www.openwall.com/lists/oss-security/2024/02/14/4nvdMailing List

News mentions

0

No linked articles in our index yet.