Read the docs
Red Hat Security Advisory

RHSA-2025:6990

grub2 security update

Released 2025-05-13 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 8 records

TI-2025-00584 CVE-2025-0690 · GHSA-9fg2-2f57-9p5h

Grub2: read: integer overflow may lead to out-of-bounds write

Priority LOW 31

The read command is used to read the keyboard input from the user, while reads it keeps the input length in a 32-bit integer value which is further used to reallocate the line buffer to accept the next character.

CVSS 3.1MEDIUM 6.1 Physical High privileges User interaction EPSS 0.00793 Published 2025-02-24 Partial fix · 1:2.06-104.el9_6 CWE-787
TI-2024-30748 CVE-2024-45781 · GHSA-2xfx-cg6v-cwqv

Grub2: fs/ufs: oob write in the heap

Priority LOW 31

A flaw was found in grub2.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00305 Published 2025-02-18 Partial fix · 1:2.12-15.el10_0, 1:2.06-104.el9_6 CWE-787
TI-2024-30742 CVE-2024-45775 · GHSA-pf8f-3pq9-mrv7

Grub2: commands/extcmd: missing check for failed allocation

Priority LOW 23

A flaw was found in grub2 where the grub_extcmd_dispatcher() function calls grub_arg_list_alloc() to allocate memory for the grub's argument list.

CVSS 3.1MEDIUM 5.2 Local High privileges No interaction EPSS 0.00292 Published 2025-02-18 Partial fix · 1:2.06-104.el9_6 CWE-252