Red Hat Security Advisory

RHSA-2026:4998

grub2 security update

Released 2026-03-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS AUS (v. 8.2) grub2-1:2.02-87.el8_2.14, grub2-common-1:2.02-87.el8_2.14, grub2-efi-aa64-modules-1:2.02-87.el8_2.14 +13

TI-2025-38095 CVE-2025-61662 · GHSA-g7mr-vm94-3rv7

LOW 33

A Use-After-Free vulnerability has been discovered in GRUB's gettext module.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00219 Published 2025-11-18 Fixed in 1:2.12-29.el10_1.2, 1:2.12-15.el10_0.2 +19 CWE-416