diff options
author | Matthew Garrett <mjg@redhat.com> | 2012-04-30 16:11:30 -0400 |
---|---|---|
committer | Linus Torvalds <torvalds@linux-foundation.org> | 2012-04-30 15:30:18 -0700 |
commit | fec6c20b570bcf541e581fc97f2e0cbdb9725b98 (patch) | |
tree | 2c84d6748a2aeff0f98ef5abbcc0144273bb8978 /include | |
parent | 41b3254c93acc56adc3c4477fef7c9512d47659e (diff) | |
download | linux-fec6c20b570bcf541e581fc97f2e0cbdb9725b98.tar.gz linux-fec6c20b570bcf541e581fc97f2e0cbdb9725b98.tar.bz2 linux-fec6c20b570bcf541e581fc97f2e0cbdb9725b98.zip |
efi: Validate UEFI boot variables
A common flaw in UEFI systems is a refusal to POST triggered by a malformed
boot variable. Once in this state, machines may only be restored by
reflashing their firmware with an external hardware device. While this is
obviously a firmware bug, the serious nature of the outcome suggests that
operating systems should filter their variable writes in order to prevent
a malicious user from rendering the machine unusable.
Signed-off-by: Matthew Garrett <mjg@redhat.com>
Cc: stable@vger.kernel.org
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Diffstat (limited to 'include')
0 files changed, 0 insertions, 0 deletions