Red Hat Security Advisory

RHSA-2022:2110

grub2 security, bug fix, and enhancement update

Released 2022-05-10 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) grub2-1:2.02-123.el8, grub2-common-1:2.02-123.el8, grub2-efi-aa64-1:2.02-123.el8 +16

Fixes 1 record

TI-2021-02878 CVE-2021-3981 · GHSA-6hfm-rxpf-979r

Incorrect default permissions in grub2

LOW 16

A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00319 Published 2022-03-08 Partial fix CWE-276