CVE-2020-14372

CVE-2020-14372: Bypass non così Secure Boot con un "semplice trucco" Dettagli della vulnerabilità Un giorno ho digitato "help" nella console di GRUB2 e ho visto alcuni comandi davvero "divertenti": readbyte ADDR: Legge un valore a 8 bit da ADDR writebyte ADDR VAL: Scrive un valore a 8 bit VAL in...

Super-UEFIinSecureBoot-Disk

Super UEFIinSecureBoot Disk Super UEFIinSecureBoot Disk è una proof-of-concept non più mantenuta o migliorata attivamente immagine avviabile con bootloader GRUB2 progettata per essere utilizzata come base per chiavette USB di ripristino. Caratteristica principale: il disco è completamente...

shim-review

Questo repository è per la revisione delle richieste di firma del shim. Per creare una richiesta di revisione: clona questo repository preferibilmente crea un fork modifica il modello sottostante aggiungi il file shim.efi da firmare aggiungi i log di build aggiungi eventuali binari/certificati/ha...

CVE-2025-0690

CVE-2025-0690: Vulnerabilità di Overflow di Interi in GRUB2 🛡️ Descrizione Generale CVE-2025-0690 è una vulnerabilità critica di overflow di interi nel bootloader GRUB2 , che consente l'esecuzione di codice arbitrario e l'elusione di Secure Boot. Questa falla colpisce i sistemi che dipendono da...

slot2

slot2 slot2: un bootkit UEFI GRUB2 a due stadi che rende persistente un impianto di rete pre-OS su Amazon Linux 2023 su AWS EC2 UEFI x8664. di cenobyte [email protected] 2026 https://github.com/cenobyte-vincit/slot2 Sommario slot2 è un bootkit per Amazon Linux 2023 su EC2. Il firmware UEFI d...

Astra Linux – Vulnerability in grub2

A flaw was discovered in grub2 in versions prior to 2.06. The rmmod implementation allows the unloading of a module that serves as a dependency without checking whether any other dependent modules are still loaded, leading to a “use-after-free” scenario. This could allow arbitrary code to be...

Astra Linux – Vulnerability in grub2

A vulnerability related to operations after freeing memory has been discovered in GRUB’s gettext module. This flaw arises from a programming error where the gettext command remains registered in memory even after its associated module is unloaded. An attacker can exploit this condition by invokin...

Astra Linux – Vulnerability in grub2

The GRUB2’s shimlock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such files to be loaded may lead to unverified code and modules being loaded in GRUB2, thereby breaking the secure boot trust-chain...

Astra Linux – Vulnerability in grub2

Integer underflow in grubnetrecvip4packets; A malicious IP packet can cause an integer underflow in the grubnetrecvip4packets function, affecting the rsm-totallen value. Under certain circumstances, the totallen value may wrap around to a small integer number, which will be used in memory...

Astra Linux – Vulnerability in grub2

A flaw was discovered in grub2 in versions prior to 2.06. The Setparamprefix function in the menu rendering code performs a length calculation based on the assumption that expressing a single quoted character would require 3 characters. However, in reality, it requires 4 characters. This allows a...

Astra Linux – Vulnerability in grub2

A flaw was discovered in grub2. When attempting to mount an HFS+ partition, the hfsplus filesystem driver does not correctly set the ERRNO value. This issue may lead to a NULL pointer access...

Astra Linux – Vulnerability in grub2

A flaw was discovered in grub2, where the grubextcmddispatcher function calls grubarglistalloc to allocate memory for the grub’s argument list. However, it does not check in case the memory allocation fails. Once the allocation fails, a NULL pointer will be processed by the parseoption function,...

Photon OS 5.0: Grub2 PHSA-2025-5.0-91-0481

An update of the grub2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0481. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Grub2 PHSA-2026-5.0-0857

An update of the grub2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0857. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

[SECURITY] [DLA 4685-1] grub2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4685-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort July 15, 2026 https://wiki.debian.org/LTS -...

Debian dla-4685 : grub-common - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4685 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4685-1 [email protected]...

Critical Photon OS Security Update - PHSA-2026-5.0-91-0857

Updates of 'linux-esx', 'nginx', 'libssh2', 'glibc', 'linux', 'grub2' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2026-5.0-92-0857

Updates of 'strongswan', 'libssh2', 'grub2', 'rubygem-nokogiri' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2026-5.0-90-0857

Updates of 'glibc', 'grub2' packages of Photon OS have been released...

RockyLinux 10 : grub2 (RLSA-2026:4649)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:4649 advisory. grub2: Missing unregister call for gettext command may lead to use-after-free CVE-2025-61662 Tenable has extracted the preceding description block directly from...