Red Hat Security Advisory

RHSA-2026:5074

grub2 security update

Released 2026-03-19 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS E4S (v.9.0) grub2-1:2.06-27.el9_0.23, grub2-common-1:2.06-27.el9_0.23, grub2-efi-aa64-1:2.06-27.el9_0.23 +13

TI-2025-38095 CVE-2025-61662 · GHSA-g7mr-vm94-3rv7

LOW 33

A Use-After-Free vulnerability has been discovered in GRUB's gettext module.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00219 Published 2025-11-18 Fixed in 1:2.12-29.el10_1.2, 1:2.12-15.el10_0.2 +19 CWE-416