345 matches found
The vulnerability of the net_set_vlan() function in the Network loader module of the Grub2 operating system allows a hacker to cause a service failure.
The vulnerability of the netsetvlan function in the Grub2 operating system loader module involves the dereferencing of a pointer whose validity has expired. Exploiting this vulnerability could allow an attacker to cause a service failure...
SUSE SLED15: grub2 / grub2-arm64-efi / grub2-arm64-efi-debug / etc (SUSE-SU-2025:4196-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4196-1 advisory. - CVE-2025-54770: Fixed missing unregister call for netsetvlan command may lead to use-after-fre...
Oracle Linux 9 : ELSA-2025-20532-0: / grub2 (ELSA-2025-205320)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-205320 advisory. - Fix CVE-2022-3775 Orabug: 34871953 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...
Security update for grub2
This update for grub2 fixes the following issues: CVE-2025-54771: Fixed rubfileclose does not properly controls the fs refcount bsc1252931 CVE-2025-61662: Fixed missing unregister call for gettext command may lead to use-after-free bsc1252933 CVE-2025-61663: Fixed missing unregister call for norm...
Grub2: missing unregister call for normal_exit command may lead to use-after-free
...
Grub2: grub2: out-of-bounds write via malicious usb device
...
Grub2: missing unregister call for gettext command may lead to use-after-free
...
TencentOS Server 4: grub2 (TSSA-2025:0411)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0411 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
AZL-70523 CVE-2025-61663 affecting package grub2 for versions less than 2.06-16
A vulnerability has been identified in the GRUB2 bootloader's normal command that poses an immediate Denial of Service DoS risk. This flaw is a Use-after-Free issue, caused because the normal command is not properly unregistered when the module is unloaded. An attacker who can execute this comman...
CVE-2025-61661
A vulnerability has been identified in the GRUB Grand Unified Bootloader component. This flaw occurs because the bootloader mishandles string conversion when reading information from a USB device, allowing an attacker to exploit inconsistent length values. A local attacker can connect a malicious...
CVE-2025-61663
A vulnerability has been identified in the GRUB2 bootloader's normal command that poses an immediate Denial of Service DoS risk. This flaw is a Use-after-Free issue, caused because the normal command is not properly unregistered when the module is unloaded. An attacker who can execute this comman...
Linux Distros Unpatched Vulnerability : CVE-2025-61664
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in the GRUB2 bootloader has been identified in the normal module. This flaw, a memory Use After Free issue, occurs because the normalexit comman...
RHEL 9 : grub2 (RHSA-2025:20532)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:20532 advisory. The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular...
Astra Linux – Vulnerability in grub2
GRUB2 does not call the fini functions upon exit, resulting in the Debian/Ubuntu’s peimage GRUB2 module leaving hooks in the UEFI system table after exit. This leads to a use-after-free condition and may potentially allow for bypasses in secure boot...
CVE-2024-45777 affecting package grub2 for versions less than 2.06-25
CVE-2024-45777 affecting package grub2 for versions less than 2.06-25. A patched version of the package is available...
CVE-2024-45778 affecting package grub2 for versions less than 2.06-25
CVE-2024-45778 affecting package grub2 for versions less than 2.06-25. A patched version of the package is available...
CVE-2025-0678 affecting package grub2 for versions less than 2.06-25
CVE-2025-0678 affecting package grub2 for versions less than 2.06-25. A patched version of the package is available...
CVE-2024-45779 affecting package grub2 for versions less than 2.06-25
CVE-2024-45779 affecting package grub2 for versions less than 2.06-25. A patched version of the package is available...