Red Hat Security Advisory

RHSA-2025:16154

grub2 security update

Released 2025-09-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 10) grub2-1:2.12-15.el10_0, grub2-common-1:2.12-15.el10_0, grub2-efi-aa64-1:2.12-15.el10_0 +13

TI-2024-30748 CVE-2024-45781 · GHSA-2xfx-cg6v-cwqv

LOW 31

A flaw was found in grub2.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00305 Published 2025-02-18 Partial fix · 1:2.12-15.el10_0, 1:2.06-104.el9_6 CWE-787

TI-2024-30743 CVE-2024-45776 · GHSA-8852-57vj-5pjq

LOW 31

When reading the language .mo file in grub_mofile_open(), grub2 fails to verify an integer overflow when allocating its internal buffer.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00305 Published 2025-02-18 Partial fix · 1:2.12-15.el10_0, 1:2.06-104.el9_6 CWE-787

TI-2025-00571 CVE-2025-0677 · GHSA-h592-gmp8-rvr7

LOW 30

A flaw was found in grub2.

CVSS 3.1MEDIUM 6.4 Local High privileges No interaction EPSS 0.00328 Published 2025-02-19 Partial fix · 1:2.12-15.el10_0, 1:2.06-104.el9_6 CWE-787

TI-2025-00523 CVE-2025-0622 · GHSA-vjmw-pmxv-8c6w

LOW 30

A flaw was found in command/gpg.

CVSS 3.1MEDIUM 6.4 Local High privileges No interaction EPSS 0.00283 Published 2025-02-18 Partial fix · 1:2.12-15.el10_0, 1:2.06-104.el9_6 CWE-416

TI-2025-00950 CVE-2025-1118 · GHSA-5r25-p9f2-w2xv

LOW 20

A flaw was found in grub2.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00321 Published 2025-02-19 Partial fix · 1:2.12-15.el10_0 CWE-501