CVE-2025-1272 HIGH

CVE-2025-1272: Kernel: secure boot does not automatically enable kernel lockdown

Vendor Fedora Project
Product Fedora Linux
Published February 18, 2026
Last update February 26, 2026
View on NVD All CVEs

CVSS base score

7.7/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

The Linux Kernel lockdown mode for kernel versions starting on 6.12 and above for Fedora Linux has the lockdown mode disabled without any warning. This may allow an attacker to gain access to sensitive information such kernel memory mappings, I/O ports, BPF and kprobes. Additionally unsigned modules can be loaded, leading to execution of untrusted code breaking breaking any Secure Boot protection. This vulnerability affects only Fedora Linux.

Key dates

02Disclosure timeline

February 18, 2026 CVE published
February 26, 2026 Record updated