Security update for grub2

This update for grub2 fixes the following issues: CVE-2025-54771: Fixed rubfileclose does not properly controls the fs refcount bsc1252931 CVE-2025-61662: Fixed missing unregister call for gettext command may lead to use-after-free bsc1252933 CVE-2025-61663: Fixed missing unregister call for norm...

Grub2: missing unregister call for normal_exit command may lead to use-after-free

...

Grub2: grub2: out-of-bounds write via malicious usb device

...

Grub2: missing unregister call for gettext command may lead to use-after-free

...

TencentOS Server 4: grub2 (TSSA-2025:0411)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0411 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

AZL-70523 CVE-2025-61663 affecting package grub2 for versions less than 2.06-16

A vulnerability has been identified in the GRUB2 bootloader's normal command that poses an immediate Denial of Service DoS risk. This flaw is a Use-after-Free issue, caused because the normal command is not properly unregistered when the module is unloaded. An attacker who can execute this comman...

CVE-2025-61661

A vulnerability has been identified in the GRUB Grand Unified Bootloader component. This flaw occurs because the bootloader mishandles string conversion when reading information from a USB device, allowing an attacker to exploit inconsistent length values. A local attacker can connect a malicious...

CVE-2025-61663

A vulnerability has been identified in the GRUB2 bootloader's normal command that poses an immediate Denial of Service DoS risk. This flaw is a Use-after-Free issue, caused because the normal command is not properly unregistered when the module is unloaded. An attacker who can execute this comman...

Linux Distros Unpatched Vulnerability : CVE-2025-61664

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in the GRUB2 bootloader has been identified in the normal module. This flaw, a memory Use After Free issue, occurs because the normalexit comman...

RHEL 9 : grub2 (RHSA-2025:20532)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:20532 advisory. The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular...

Astra Linux – Vulnerability in grub2

GRUB2 does not call the fini functions upon exit, resulting in the Debian/Ubuntu’s peimage GRUB2 module leaving hooks in the UEFI system table after exit. This leads to a use-after-free condition and may potentially allow for bypasses in secure boot...

CVE-2024-45777 affecting package grub2 for versions less than 2.06-25

CVE-2024-45777 affecting package grub2 for versions less than 2.06-25. A patched version of the package is available...

CVE-2024-45778 affecting package grub2 for versions less than 2.06-25

CVE-2024-45778 affecting package grub2 for versions less than 2.06-25. A patched version of the package is available...

CVE-2024-45779 affecting package grub2 for versions less than 2.06-25

CVE-2024-45779 affecting package grub2 for versions less than 2.06-25. A patched version of the package is available...

CVE-2025-1118 affecting package grub2 for versions less than 2.06-25

CVE-2025-1118 affecting package grub2 for versions less than 2.06-25. A patched version of the package is available...

CVE-2024-45776 affecting package grub2 for versions less than 2.06-25

CVE-2024-45776 affecting package grub2 for versions less than 2.06-25. A patched version of the package is available...

CVE-2025-0678 affecting package grub2 for versions less than 2.06-25

CVE-2025-0678 affecting package grub2 for versions less than 2.06-25. A patched version of the package is available...

CVE-2024-45774 affecting package grub2 for versions less than 2.06-25

CVE-2024-45774 affecting package grub2 for versions less than 2.06-25. A patched version of the package is available...

EulerOS 2.0 SP13 : grub2 (EulerOS-SA-2025-2261)

According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU GRUB aka GRUB2 through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem.CVE-2024-56737 GNU GRUB a...

EulerOS 2.0 SP13 : grub2 (EulerOS-SA-2025-2293)

According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU GRUB aka GRUB2 through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem.CVE-2024-56737 GNU GRUB a...