Insyde's Security Pledge
Recent Security Advisories

INSYDE-SA-2025006
Product
CVSS Score
Original Date
Last Revised
InsydeH2O
See in Description
2025-08-12
Summary
Secure Boot Forbidden Signature Database, dbx, update.
Vulnerability Details
CVSS Vector: See in Description
Update Secure Boot dbx which addresses following vulnerability
1. CVE-2025-3052
CVSS: 8.2; CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Description: An arbitrary write vulnerability in a signed UEFI firmware allows for SecureBoot bypass.
Solution Information
Kernel 5.2, Version 05.2A.24
Kernel 5.3, Version 05.39.24
Kernel 5.4, Version 05.47.24
Kernel 5.5, Version 05.55.24
Kernel 5.6, Version 05.62.24
Kernel 5.7, Version 05.71.24
Acknowledgements
Revision History
Revision #
Date
Description
1
2025-08-12
Initial Release