OESA-2025-2735 grub2 security update

GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn. Security Fixes: A vulnerability has been identified in the GRUB2 bootloader's network module that poses an immediate Denial of Service...

OESA-2025-2738 grub2 security update

GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn. Security Fixes: A use-after-free vulnerability has been identified in the GNU GRUB Grand Unified Bootloader. The flaw occurs because t...

OESA-2025-2737 grub2 security update

GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn. Security Fixes: A vulnerability has been identified in the GRUB2 bootloader's network module that poses an immediate Denial of Service...

OESA-2025-2736 grub2 security update

GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn. Security Fixes: A vulnerability has been identified in the GRUB2 bootloader's network module that poses an immediate Denial of Service...

OESA-2025-2739 grub2 security update

GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn. Security Fixes: A use-after-free vulnerability has been identified in the GNU GRUB Grand Unified Bootloader. The flaw occurs because t...

The vulnerability of the gettext module of the Grub2 operating system’s loader, which allows a hacker to cause a service failure

The vulnerability of the gettext loader module in the Grub2 operating system relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of Grub2 operating system loaders, related to incorrect buffer size calculations when processing received packets, allows attackers to cause service failures.

The vulnerability of Grub2 operating system loaders is related to incorrect calculation of buffer size during the processing of received packets. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the net_set_vlan() function in the Network loader module of the Grub2 operating system allows a hacker to cause a service failure.

The vulnerability of the netsetvlan function in the Grub2 operating system loader module involves the dereferencing of a pointer whose validity has expired. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the normal_exit() function in the Grub2 operating system’s loader allows a hacker to trigger a service failure.

The vulnerability of the normalexit function in the Grub2 operating system loader is related to the pointer being reclaimed after its expiration. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of Grub2 operating system loaders, related to the pointer aging mechanism, allows attackers to trigger a service failure.

The vulnerability of Grub2 operating system loaders is related to the pointer being set to an expired value. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of Grub2 operating system loaders, related to the pointer aging mechanism, allows attackers to trigger a service failure and gain unauthorized access to the system.

The vulnerability of Grub2 operating system loaders is related to the pointer being set to an expired value. Exploiting this vulnerability can allow an attacker to cause a service failure and gain unauthorized access to the system...

SUSE SLED15: grub2 / grub2-arm64-efi / grub2-arm64-efi-debug / etc (SUSE-SU-2025:4196-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4196-1 advisory. - CVE-2025-54770: Fixed missing unregister call for netsetvlan command may lead to use-after-fre...

Oracle Linux 9 : ELSA-2025-20532-0: / grub2 (ELSA-2025-205320)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-205320 advisory. - Fix CVE-2022-3775 Orabug: 34871953 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

Security update for grub2

This update for grub2 fixes the following issues: CVE-2025-54771: Fixed rubfileclose does not properly controls the fs refcount bsc1252931 CVE-2025-61662: Fixed missing unregister call for gettext command may lead to use-after-free bsc1252933 CVE-2025-61663: Fixed missing unregister call for norm...

Grub2: missing unregister call for normal_exit command may lead to use-after-free

...

Grub2: grub2: out-of-bounds write via malicious usb device

...

Grub2: missing unregister call for gettext command may lead to use-after-free

...

Grub2: use-after-free in net_set_vlan

...

Grub2: use-after-free in grub_file_close()

...

SUSE CVE-2025-54771

A use-after-free vulnerability has been identified in the GNU GRUB Grand Unified Bootloader. The flaw occurs because the file-closing process incorrectly retains a memory pointer, leaving an invalid reference to a file system structure. An attacker could exploit this vulnerability to cause grub t...