DeutschShown in its original language — a full translation is planned for a future version.
Grub: Mehrere Schwachstellen
view advisory published 2025-11-18
Ein Angreifer kann mehrere Schwachstellen in Grub ausnutzen, um beliebigen Programmcode auszuführen, und um einen Denial of Service Angriff durchzuführen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-61664US | — | — | ||
A vulnerability in the GRUB2 bootloader has been identified in the normal module. This flaw, a memory Use After Free issue, occurs because the normal_exit command is not properly u… | ||||
| CVE-2025-61663US | — | — | ||
A vulnerability has been identified in the GRUB2 bootloader's normal command that poses an immediate Denial of Service (DoS) risk. This flaw is a Use-after-Free issue, caused becau… | ||||
| CVE-2025-61662US | — | — | ||
A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a programming error where the gettext command remains registered in memory after i… | ||||
| CVE-2025-61661US | — | — | ||
A vulnerability has been identified in the GRUB (Grand Unified Bootloader) component. This flaw occurs because the bootloader mishandles string conversion when reading information… | ||||
| CVE-2025-54771US | — | — | ||
A use-after-free vulnerability has been identified in the GNU GRUB (Grand Unified Bootloader). The flaw occurs because the file-closing process incorrectly retains a memory pointer… | ||||
| CVE-2025-54770US | — | — | ||
A vulnerability has been identified in the GRUB2 bootloader's network module that poses an immediate Denial of Service (DoS) risk. This flaw is a Use-after-Free issue, caused becau… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:10097 vom 2026-04-30external
- Red Hat Security Advisory vom 2026-05-13external
- Red Hat Security Advisory RHSA-2026:15087 vom 2026-05-13external
- Red Hat Security Advisory RHSA-2026:17596 vom 2026-05-20external
- Red Hat Security Advisory RHSA-2026:4648 vom 2026-03-16external
- Red Hat Security Advisory RHSA-2026:4649 vom 2026-03-17external
- Red Hat Security Advisory RHSA-2026:4652 vom 2026-03-17external
- Red Hat Security Advisory RHSA-2026:4653 vom 2026-03-17external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan