CVE-2022-2601

🗓️ 14 Dec 2022 00:00:00Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 790 Views

A buffer overflow in grub_font_construct_glyph() allows malicious crafted pf2 font to cause heap based out-of-bounds write, bypassing secure boot

Reporter	Title	Published	Views	Family All 223
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, libcurl, Golang Go, Jetty, Guava, Netty, OpenSSL, Linux kernel may affect IBM Spectrum Protect Plus	23 Mar 202320:19	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Spectrum Copy Data Management (CVE-2022-2964, CVE-2022-2601, CVE-2020-36557)	16 Mar 202315:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Linux Kernel Buffer overflow and denial of service vulnerabilities( CVE-2022-2601, CVE-2022-3775)	5 Jul 202321:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by a Kernel vulnerability (CVE-2022-2601)	8 Oct 202415:41	–	ibm
ATTACKERKB	CVE-2022-2601	14 Dec 202221:15	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : grub2-common, grub2-efi-aa64, grub2-efi-aa64-cdboot (ALAS2023-2023-020)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : grub2 (ALAS-2023-2146)	20 Jul 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0003: grub2 (ALINUX3-SA-2023:0003)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : grub2 (ALSA-2023:0049)	10 Jan 202300:00	–	nessus
Tenable Nessus	AlmaLinux 9 : grub2 (ALSA-2023:0752)	14 Feb 202300:00	–	nessus

NVD

Vulners

Node

gnu grub2Range≤2.06

[
  {
    "vendor": "n/a",
    "product": "grub2",
    "versions": [
      {
        "version": "grub2 2.06 and lower",
        "status": "affected"
      }
    ]
  }
]

Source	Link
security	www.security.gentoo.org/glsa/202311-14
security	www.security.netapp.com/advisory/ntap-20230203-0004/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
arstechnica	www.arstechnica.com/security/2024/08/a-patch-microsoft-spent-2-years-preparing-is-making-a-mess-for-some-linux-users/

27 May 2026 15:16Current

8.7High risk

Vulners AI Score8.7

CVSS 3.18.6

EPSS0.0012

SSVC