CVE-2023-40547

CVE-2023-40547 is a critical remote code execution vulnerability in Shim, affecting Red Hat Enterprise Linux and other Linux distributions. It allows an attacker to achieve complete system compromise through an out-of-bounds write during the early boot phase by manipulating HTTP responses. This high-severity flaw (CVSS 8.3) requires a Man-in-the-Middle attack or boot server compromise, making exploitation complex. While not actively exploited or having public exploit code, it has garnered significant community discussion and media attention, indicating a high level of concern.