This vulnerability arises from GRUB's failure to validate that the MMIO base address used by the serial command corresponds to a legitimate UART device. An attacker controlling GRUB's configuration can exploit this by providing an arbitrary memory address, enabling writes to attacker-controlled memory. This can reset the grub_file_verifiers list, effectively disabling verification of loaded modules. Consequently, the attacker can load unsigned GRUB modules despite Secure Boot lockdown being enabled, bypassing intended security restrictions.

The vulnerability allows a local attacker with high privileges (control over GRUB configuration) to bypass Secure Boot lockdown protections and load unsigned GRUB modules. This undermines the integrity of the boot process, potentially leading to execution of unauthorized code with high privileges. The CVSS score of 6.4 (medium severity) reflects the requirement for local privileged access and the complexity of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to systems and ensure GRUB configuration integrity to prevent unauthorized modifications.