OESA-2022-2118 grub2 security update

🗓️ 25 Nov 2022 11:04:39Reported by GoogleType

osv🔗 osv.dev👁 2 Views

Grub2 font flaws fixed: out-of-bounds writes may corrupt memory or bypass secure boot (CVE-2022-2601; CVE-2022-3775).

Reporter	Title	Published	Views	Family All 300
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, libcurl, Golang Go, Jetty, Guava, Netty, OpenSSL, Linux kernel may affect IBM Spectrum Protect Plus	23 Mar 202320:19	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Spectrum Copy Data Management (CVE-2022-2964, CVE-2022-2601, CVE-2020-36557)	16 Mar 202315:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Linux Kernel Buffer overflow and denial of service vulnerabilities( CVE-2022-2601, CVE-2022-3775)	5 Jul 202321:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by a Kernel vulnerability (CVE-2022-2601)	8 Oct 202415:41	–	ibm
ATTACKERKB	CVE-2022-2601	14 Dec 202221:15	–	attackerkb
ATTACKERKB	CVE-2022-3775	19 Dec 202220:15	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : grub2-common, grub2-efi-aa64, grub2-efi-aa64-cdboot (ALAS2023-2023-020)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : grub2 (ALAS-2023-2146)	20 Jul 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0003: grub2 (ALINUX3-SA-2023:0003)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : grub2 (ALSA-2023:0049)	10 Jan 202300:00	–	nessus

Source	Link
openeuler	www.openeuler.org/en/security/safety-bulletin/detail.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-2601
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-3775

03 Sep 2025 06:18Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.18.6

EPSS0.0012

SSVC