TI-2025-38095 CVE-2025-61662 · GHSA-g7mr-vm94-3rv7
Grub2: missing unregister call for gettext command may lead to use-after-free
Priority LOW 33
A Use-After-Free vulnerability has been discovered in GRUB's gettext module.
RHSA-2026:4654
grub2 security update
Released 2026-03-16 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS AUS (v.8.6) grub2-1:2.02-123.el8_6.19, grub2-common-1:2.02-123.el8_6.19, grub2-efi-aa64-modules-1:2.02-123.el8_6.19 +13
- Red Hat Enterprise Linux BaseOS E4S (v.8.6) grub2-1:2.02-123.el8_6.19, grub2-common-1:2.02-123.el8_6.19, grub2-efi-aa64-1:2.02-123.el8_6.19 +16
- Red Hat Enterprise Linux BaseOS TUS (v.8.6) grub2-1:2.02-123.el8_6.19, grub2-common-1:2.02-123.el8_6.19, grub2-efi-aa64-modules-1:2.02-123.el8_6.19 +13