Red Hat Security Advisory

RHSA-2024:0456

grub2 security update

Released 2024-01-25 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS EUS (v.9.2) grub2-1:2.06-61.el9_2.2, grub2-common-1:2.06-61.el9_2.2, grub2-efi-aa64-1:2.06-61.el9_2.2 +13

Fixes 1 record

TI-2023-03715 CVE-2023-4001 · GHSA-rr4v-xrwq-7rhx

Grub2: bypass the grub password protection feature

LOW 33

An authentication bypass flaw was found in GRUB due to the way that GRUB uses the UUID of a device to search for the configuration file that contains the password hash for the GRUB password protection feature.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00542 Published 2024-01-15 Fixed in 1:2.06-70.el9_3.2, 1:2.06-27.el9_0.16 +1 CWE-290