CVE-2025-59697

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 patched in 13.6.12 LTS and 13.9.0 STS, allow a physically proximate attacker to escalate privileges by editing the Legacy GRUB bootloader configuration to start a root shell upon boot of the host OS. This is called...

PT-2025-48700

Name of the Vulnerable Software and Affected Versions Entrust nShield Connect XC versions through 13.6.11 Entrust nShield 5c versions through 13.6.11 Entrust nShield HSMi versions through 13.6.11 Entrust nShield Connect XC version 13.7 Entrust nShield 5c version 13.7 Entrust nShield HSMi version...

CVE-2025-59697

Entrust nShield devices are affected: Connect XC, nShield 5c, and nShield HSMi up to v13.6.11 and 13.7 allow a physically proximate attacker to escalate privileges by editing the Legacy GRUB bootloader configuration to boot a root shell on host OS start (F06). The underlying issue is a boot-time ...

Entrust nShield Connect XC 安全漏洞

Entrust nShield Connect XC is a network-connected hardware security module from Entrust USA. A security vulnerability exists in Entrust nShield Connect XC that originates from a physical neighbor attacker who can edit the Legacy GRUB boot configuration to obtain a root shell...

CVE-2025-59699

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 patched in 13.6.12 LTS and 13.9.0 STS, allow a physically proximate attacker to escalate privileges by booting from a USB device with a valid root filesystem. This occurs because of insecure default settings in the...

CVE-2025-59699

Entrust nShield Connect XC (up to 13.6.11), nShield 5c (up to 13.6.11), and nShield HSMi (up to 13.6.11) and nShield Connect XC/HSMi 13.7 are affected by CVE-2025-59699. A physically proximate attacker can escalate privileges by booting from a USB device containing a valid root filesystem, due to...

OESA-2025-2735 grub2 security update

GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn. Security Fixes: A vulnerability has been identified in the GRUB2 bootloader's network module that poses an immediate Denial of Service...

OESA-2025-2738 grub2 security update

GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn. Security Fixes: A use-after-free vulnerability has been identified in the GNU GRUB Grand Unified Bootloader. The flaw occurs because t...

OESA-2025-2737 grub2 security update

GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn. Security Fixes: A vulnerability has been identified in the GRUB2 bootloader's network module that poses an immediate Denial of Service...

OESA-2025-2739 grub2 security update

GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn. Security Fixes: A use-after-free vulnerability has been identified in the GNU GRUB Grand Unified Bootloader. The flaw occurs because t...

OESA-2025-2736 grub2 security update

GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn. Security Fixes: A vulnerability has been identified in the GRUB2 bootloader's network module that poses an immediate Denial of Service...

The vulnerability of the gettext module of the Grub2 operating system allows a hacker to cause a service failure.

The vulnerability of the gettext loader module in the Grub2 operating system relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of Grub2 operating system loaders, related to incorrect buffer size calculations when processing received packets, allows attackers to cause service failures.

The vulnerability of Grub2 operating system loaders is related to incorrect calculation of buffer size during the processing of received packets. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the net_set_vlan() function in the Network loader module of the Grub2 operating system allows a hacker to cause a service failure.

The vulnerability of the netsetvlan function in the Network loader module of the Grub2 operating system is related to the pointer being dereferenced after its expiration. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of Grub2 operating system loaders, related to the pointer aging mechanism, allows attackers to trigger a service failure and gain unauthorized access to the system.

The vulnerability of Grub2 operating system loaders is related to the pointer being set to an expired value. Exploiting this vulnerability can allow attackers to cause service failures and gain unauthorized access to the system...

The vulnerability of the normal_exit() function in the Grub2 operating system’s loader allows a hacker to trigger a service failure.

The vulnerability of the normalexit function in the Grub2 operating system loader is related to the pointer being dereferenced when its validity period has expired. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the Grub2 operating system loader, related to the pointer being set to an expired value, allows a hacker to trigger a service failure.

The vulnerability of Grub2 operating system loaders is related to the pointer being set to an expired value. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE SLED15: grub2 / grub2-arm64-efi / grub2-arm64-efi-debug / etc (SUSE-SU-2025:4196-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4196-1 advisory. - CVE-2025-54770: Fixed missing unregister call for netsetvlan command may lead to use-after-fre...

Oracle Linux 9 : ELSA-2025-20532-0: / grub2 (ELSA-2025-205320)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-205320 advisory. - Fix CVE-2022-3775 Orabug: 34871953 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Security update for grub2

This update for grub2 fixes the following issues: CVE-2025-54771: Fixed rubfileclose does not properly controls the fs refcount bsc1252931 CVE-2025-61662: Fixed missing unregister call for gettext command may lead to use-after-free bsc1252933 CVE-2025-61663: Fixed missing unregister call for norm...