A critical vulnerability in Fedora Linux kernel lockdown mode enables unauthorized access to sensitive memory and code execution, compromising system integrity and Secure Boot security.

The Linux kernel lockdown mode is incorrectly disabled by default, allowing a high-privileged local attacker to access kernel memory mappings, I/O ports, and load unsigned modules.

Successful exploitation allows an attacker to bypass critical system security controls, including Secure Boot, leading to full system compromise. Given the CVSS score of 7.7, this represents a high-severity risk to organizations relying on Fedora Linux, as it permits the execution of arbitrary, untrusted code within the kernel space, potentially resulting in complete data exposure and loss of system control.

Immediate Action: Update the affected Fedora Linux systems to versions 6.12.15-100.fc40, 6.12.15-200.fc41, or later versions where the lockdown mode is properly enforced.

Proactive Monitoring: Monitor system logs for unauthorized module loading events or suspicious attempts to access kernel-level interfaces.

Compensating Controls: Ensure that physical access to servers is restricted and that only trusted administrators have high-level privileges, as the attack requires privileged access to the local machine.

Public Exploit Available: No (exploit_available unknown).

This vulnerability presents a significant risk to the integrity of the boot and execution environment on affected Fedora Linux distributions. Administrators should prioritize patching these kernel versions immediately to restore lockdown mode functionality and prevent potential kernel-level code execution by malicious actors.