UBUNTU-CVE-2022-2601

🗓️ 14 Dec 2022 21:15:00Reported by GoogleType

osv🔗 osv.dev👁 4 Views

Buffer overflow in grub_font_construct_glyph due to max_glyph_size miscalculation with a crafted pf2 font, enabling secure boot bypass.

Reporter	Title	Published	Views	Family All 223
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, libcurl, Golang Go, Jetty, Guava, Netty, OpenSSL, Linux kernel may affect IBM Spectrum Protect Plus	23 Mar 202320:19	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel might affect IBM Spectrum Copy Data Management (CVE-2022-2964, CVE-2022-2601, CVE-2020-36557)	16 Mar 202315:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Linux Kernel Buffer overflow and denial of service vulnerabilities( CVE-2022-2601, CVE-2022-3775)	5 Jul 202321:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by a Kernel vulnerability (CVE-2022-2601)	8 Oct 202415:41	–	ibm
ATTACKERKB	CVE-2022-2601	14 Dec 202221:15	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : grub2-common, grub2-efi-aa64, grub2-efi-aa64-cdboot (ALAS2023-2023-020)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : grub2 (ALAS-2023-2146)	20 Jul 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0003: grub2 (ALINUX3-SA-2023:0003)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : grub2 (ALSA-2023:0049)	10 Jan 202300:00	–	nessus
Tenable Nessus	AlmaLinux 9 : grub2 (ALSA-2023:0752)	14 Feb 202300:00	–	nessus

Source	Link
ubuntu	www.ubuntu.com/security/CVE-2022-2601
lists	www.lists.gnu.org/archive/html/grub-devel/2022-11/msg00059.html
cve	www.cve.org/CVERecord

29 May 2026 18:00Current

7.1High risk

Vulners AI Score7.1

CVSS 3.18.6

EPSS0.00514