On 2025-02-24 I installed the Secure Boot dbx Configuration in Gnome Software on my Fedora 41 PC. I did a weekly update at the same time, and since then, whenever I navigate around in Thunderbird or startup Firefox, my CPU temps go from 48% to >80% and the cpu water cooler fans go into jet-plane mode.
Not sure if it’s just general software updates that are the cuase, or the specific firmware update. Rebooted, applied all updates, retested with thunderbird and Firefox, and still same issue. Running btop shows temps spiking (and fans very audible compared to their normally quiet state). CPU usage for thunderbird never goes above 4% though.
Any ideas?
I’ve got an ASUS ProArt B550 mb with a Ryzen 7 5800X.
sudo fwupdmgr get-history
[sudo] password for user:
ASUS System Product Name
│
└─UEFI dbx:
│ Device ID: 362301da643102b9f
│ Previous version: 20230501
│ Update State: Success
│ Last modified: 2025-02-24 10:57
│ GUID: f8ff0d50-c757-5dc3-
│ Device Flags: • Internal device
│ • Updatable
│ • Supported on remote server
│ • Needs a reboot after installation
│ • Device is usable for the duration of the update
│ • Only version upgrades are allowed
│ • Signed Payload
│
└─Secure Boot dbx Configuration Update:
New version: 20241101
Remote ID: lvfs
Release ID: 105821
Summary: UEFI Secure Boot Forbidden Signature Database
Variant: x64
Licence: Proprietary
Size: 15.1 kB
Created: 2025-01-17
Urgency: High
Tested by Linux Foundation:
Tested: 2025-01-20
Distribution: fedora 41 (workstation)
Old version: 20240301
Version[fwupd]: 2.0.4
Vendor: Linux Foundation
Duration: 1 second
Release Flags: • Trusted metadata
• Tested by trusted vendor
Description:
This updates the list of forbidden signatures (the “dbx”) to the latest release from Microsoft.
An insecure version of Howyar's SysReturn software was added, due to a security vulnerability that allowed an attacker to bypass UEFI Secure Boot.
Issues: 529659
CVE-2024-7344
Checksum: d661d4a0aaca09dfa9e56967ca2467b0575fc07cb704d182fa8c68225452957f