CVE-2023-48733 Security feature bypass in Ubuntu EDK II
An insecure default in Ubuntu's EDK2 allows OS-resident attackers to bypass Secure Boot, requiring patches from Canonical.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-48733?
CVE-2023-48733 is a medium-severity vulnerability in Debian Debian Linux, published on 14 Feb 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot.
Weakness: CWE-1188
Which versions are affected by CVE-2023-48733?
It affects 3 products.
Linux distribution packages (1)
ovmf openSUSE:Tumbleweed | All versions | 202308-7.1 |
Products include Canonical Lxd, Debian Debian Linux, Tianocore Edk2.
How do I fix CVE-2023-48733?
Apply the vendor's patch.
Is CVE-2023-48733 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-48733 exists.
Other vulnerabilities in Debian Debian Linux
- CVE-2026-66897 Instance template path traversal allows arbitrary host file write as root
- CVE-2026-62420 Cross-project cluster migration bypasses project restrictions via cluster notification flag
- CVE-2026-63293 Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root
- CVE-2026-63294 Root RCE via image backup.yaml symlink
- CVE-2026-63296 Project restriction bypass via instance migration config override
Sources
Also known as DEBIAN-CVE-2023-48733, DLA-3852-1, DSA-5624-1, GHSA-cjc8-gmgf-qv2g, UBUNTU-CVE-2023-48733, openSUSE-SU-2024:13807-1.