Every CVE Search/ Get API key

CVE-2024-49504

grub2 allows bypassing TPM-bound disk encryption on SL(E)M encrypted Images

7.0 HighFix available

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks.

Attack profile

How easy it is to exploit

Attack vector
Physical
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.32%Up 0.3 points since Nov 14, 2024
90%50%10%1%

What each source reports

CVE List Score used 7.0

grub2 allows bypassing TPM-bound disk encryption on SL(E)M encrypted Images

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks.

Record
CVE-2024-49504
CVSS 4.0
7.0 HighCVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Weakness
CWE-276
Updated
2026-11-02
EUVDEUVD-2024-43438 7.0

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks.

Record
EUVD-2024-43438
CVSS 4.0
7.0 HighCVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Updated
2026-11-03
GitHub AdvisoriesGHSA-46pf-6w9r-96r9 7.0

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks.

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks.

Record
GHSA-46pf-6w9r-96r9
CVSS 4.0
7.0 HighCVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness
CWE-276
Updated
2026-11-02
NVD 7.0

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks.

Record
CVE-2024-49504
CVSS 4.0
7.0 HighCVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness
CWE-276
Updated
2026-11-02
OSVOESA-2025-1452 8.4

grub2 security update

GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn.

Security Fix(es):

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks.(CVE-2024-49504)

Record
OESA-2025-1452
CVSS 3.1
8.4 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-49504 7.0

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks.

Record
UBUNTU-CVE-2024-49504
CVSS 4.0
7.0 HighCVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Updated
2026-11-02
Show 5 moreShow less
OSV No score

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks.

Record
CVE-2024-49504
Updated
2026-11-02
OSVopenSUSE-SU-2024:14464-1 No score

grub2-2.12-28.1 on GA media

These are all security issues fixed in the grub2-2.12-28.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14464-1
Updated
2026-11-02
OSVSUSE-SU-2025:0586-1 No score

Security update for grub2

This update for grub2 fixes the following issues:

  • CVE-2024-45781: Fixed strcpy overflow in ufs. (bsc#1233617)
  • CVE-2024-56737: Fixed a heap-based buffer overflow in hfs. (bsc#1234958)
  • CVE-2024-45782: Fixed strcpy overflow in hfs. (bsc#1233615)
  • CVE-2024-45780: Fixed an overflow in tar/cpio. (bsc#1233614)
  • CVE-2024-45783: Fixed a refcount overflow in hfsplus. (bsc#1233616)
  • CVE-2024-45774: Fixed a heap overflow in JPEG parser. (bsc#1233609)
  • CVE-2024-45775: Fixed a missing NULL check in extcmd parser. (bsc#1233610)
  • CVE-2024-45776: Fixed an overflow in .MO file handling. (bsc#1233612)
  • CVE-2024-45777: Fixed an integer overflow in gettext. (bsc#1233613)
  • CVE-2024-45778: Fixed bfs filesystem by removing it from lockdown capable modules. (bsc#1233606)
  • CVE-2024-45779: Fixed a heap overflow in bfs. (bsc#1233608)
  • CVE-2024-49504: Fixed an issue that can bypass TPM-bound disk encryption on SL(E)M encrypted Images. (bsc#1229164)
  • CVE-2025-0624: Fixed an out-of-bounds write during the network boot process. (bsc#1236316)
  • CVE-2025-0622: Fixed a use-after-free when handling hooks during module unload in command/gpg . (bsc#1236317)
  • CVE-2025-0690: Fixed an integer overflow that may lead to an out-of-bounds write through the read command. (bsc#1237012)
  • CVE-2025-1118: Fixed an issue where the dump command was not being blocked when grub was in lockdown mode. (bsc#1237013)
  • CVE-2025-0677: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks in ufs. (bsc#1237002)
  • CVE-2025-0684: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks in reiserfs. (bsc#1237008)
  • CVE-2025-0685: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks in jfs. (bsc#1237009)
  • CVE-2025-0686: Fixed an integer overflow that may lead to an out-of-bounds write when handling symlinks in romfs. (bsc#1237010)
  • CVE-2025-0689: Fixed a heap-based buffer overflow in udf that may lead to arbitrary code execution. (bsc#1237011)
  • CVE-2025-1125: Fixed an integer overflow that may lead to an out-of-bounds write in hfs. (bsc#1237014)
  • CVE-2025-0678: Fixed an integer overflow that may lead to an out-of-bounds write in squash4. (bsc#1237006)
Record
SUSE-SU-2025:0586-1
Updated
2026-11-02
OSVSUSE-SU-2025:20511-1 No score

Security update for grub2

This update for grub2 fixes the following issues:

  • CVE-2025-4382: Fixed TPM auto-decryption data exposure (bsc#1242971)

  • Filter out the non-subvolume btrfs mount points when creating the relative path (bsc#1239674)

  • CVE-2024-45781: Fixed ufs strcpy overflow (bsc#1233617)

  • CVE-2024-56737: Fixed heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem (bsc#1234958)

  • CVE-2024-45782: Fixed hfs strcpy overflow (bsc#1233615)

  • CVE-2024-45780: Fixed overflow in tar/cpio(bsc#1233614)

  • CVE-2024-45783: Fixed hfsplus refcount overflow (bsc#1233616)

  • CVE-2025-0624: Fixed out-of-bounds write in grub_net_search_config_file() (bsc#1236316)

  • CVE-2024-45774: Fixed heap overflows in JPEG parser (bsc#1233609)

  • CVE-2024-45775: Fixed missing NULL check in extcmd parser (bsc#1233610)

  • CVE-2025-0622: Fixed command/gpg: Use-after-free due to hooks not being removed on module unload (bsc#1236317)

  • CVE-2024-45776: Fixed overflow in .MO file (gettext) handling (bsc#1233612)

  • CVE-2024-45777: Fixed integer overflow in gettext (bsc#1233613)

  • CVE-2025-0690: Fixed integer overflow in read that may lead to out-of-bounds write (bsc#1237012)

  • CVE-2025-1118: Fixed commands/dump: The dump command is not in lockdown when secure boot is enabled(bsc#1237013)

  • CVE-2024-45778: Fixed bfs filesystem not fuzzing stable (bsc#1233606)

  • CVE-2024-45779: Fixed bfs heap overflow (bsc#1233608)

  • CVE-2025-0677: Fixed integer overflow that may lead to heap based out-of-bounds write when handling symlinks in ufs (bsc#1237002)

  • CVE-2025-0684: Fixed reiserfs: Integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data (bsc#1237008)

  • CVE-2025-0685: Fixed jfs: Integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data (bsc#1237009)

  • CVE-2025-0686: Fixed romfs: Integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data (bsc#1237010)

  • CVE-2025-0689: Fixed udf: Heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code execution (bsc#1237011)

  • CVE-2025-1125: Fixed fs/hfs: Interger overflow may lead to heap based out-of-bounds write (bsc#1237014)

  • CVE-2025-0678: Fixed squash4: Integer overflow may lead to heap based out-of-bounds write when reading data (bsc#1237006)

  • Bump upstream SBAT generation to 5 to block older grub2 versions.

  • CVE-2024-49504: Fixed Bypassing TPM-bound disk encryption on SL(E)M encrypted Images (bsc#1229163) (bsc#1229164)

  • Restrict CLI access if the encrypted root device is automatically unlocked by the TPM. LUKS password authentication is required for access to be granted

  • Obsolete, as CLI access is now locked and granted access no longer requires the previous restrictions

Record
SUSE-SU-2025:20511-1
Updated
2026-11-02
OSVSUSE-SU-2025:20863-1 No score

Security update for grub2

This update for grub2 fixes the following issues:

  • Fix error: /boot/grub2/x86_64-efi/bli.mod not found (bsc#1231591)

  • Fix OOM error in loading loopback file (bsc#1230840) (bsc#1249140)

  • Update the patch to fix "SRK not matched" errors when unsealing the key (bsc#1232411) (bsc#1247242)

Security fixes for 2024:

  • Bump upstream SBAT generation to 5

  • CVE-2024-45774: Fixed heap overflows in JPEG parser (bsc#1233609)

  • CVE-2024-45775: Fixed missing NULL check in extcmd parser (bsc#1233610)

  • CVE-2024-45776: Fixed overflow in .MO file (gettext) handling (bsc#1233612)

  • CVE-2024-45777: Fixed integer overflow in gettext (bsc#1233613)

  • CVE-2024-45778: Fixed bfs filesystem not fuzzing stable (bsc#1233606)

  • CVE-2024-45779: Fixed bfs heap overflow (bsc#1233608)

  • CVE-2024-45780: Fixed overflow in tar/cpio (bsc#1233614)

  • CVE-2024-45781: Fixed ufs strcpy overflow(bsc#1233617)

  • CVE-2024-45782: Fixed hfs strcpy overflow (bsc#1233615)

  • CVE-2024-45783: Fixed hfsplus refcount overflow (bsc#1233616)

  • CVE-2024-49504: Fixed bypassing TPM-bound disk encryption on SL(E)M encrypted Images (bsc#1229163) (bsc#1229164)

  • CVE-2024-56737: Fixed heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem (bsc#1234958)

  • CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grub_crypto_memcmp (bsc#1234959)

  • CVE-2025-0622: Fixed command/gpg use-after-free due to hooks not being removed on module unload (bsc#1236317)

  • CVE-2025-0624: Fixed net Out-of-bounds write in grub_net_search_config_file() (bsc#1236316)

  • CVE-2025-0677: Fixed UFS integer overflow may lead to heap based out-of-bounds write when handling symlinks (bsc#1237002)

  • CVE-2025-0678: Fixed squash4 Integer overflow may lead to heap based out-of-bounds write when reading data (bsc#1237006)

  • CVE-2025-0684: Fixed reiserfs Integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data (bsc#1237008)

  • CVE-2025-0685: Fixed jfs Integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data (bsc#1237009)

  • CVE-2025-0686: Fixed romfs Integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data (bsc#1237010)

  • CVE-2025-0689: Fixed udf heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code execution (bsc#1237011)

  • CVE-2025-0690: Fixed "read" integer overflow may lead to out-of-bounds write (bsc#1237012)

  • CVE-2025-1118: Fixed commands/dump The dump command is not in lockdown when secure boot is enabled (bsc#1237013)

  • CVE-2025-1125: Fixed fs/hfs interger overflow may lead to heap based out-of-bounds write (bsc#1237014)

  • CVE-2025-4382: Fixed TPM auto-decryption data exposure (bsc#1242971)

  • Restrict CLI access if the encrypted root device is automatically unlocked by the TPM. LUKS password authentication is required for access to be granted

Record
SUSE-SU-2025:20863-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
grub2
openEuler:20.03-LTS-SP4
 before 2.04-41.oe2003sp4
2.04-41.oe2003sp4
grub2
openEuler:22.03-LTS-SP3
 before 2.06-52.oe2203sp3
2.06-52.oe2203sp3
grub2
openEuler:22.03-LTS-SP4
 before 2.06-52.oe2203sp4
2.06-52.oe2203sp4
grub2
openEuler:24.03-LTS
 before 2.12-40.oe2403sp1
2.12-40.oe2403sp1
grub2
openEuler:24.03-LTS-SP1
 before 2.12-40.oe2403sp1
2.12-40.oe2403sp1
grub2
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 23 CVEs
 before 2.12-150600.8.18.2
2.12-150600.8.18.2
grub2
SUSE:Linux Enterprise Module for Server Applications 15 SP6
From an advisory covering 23 CVEs
 before 2.12-150600.8.18.2
2.12-150600.8.18.2
grub2
openSUSE:Leap 15.6
From an advisory covering 23 CVEs
 before 2.12-150600.8.18.2
2.12-150600.8.18.2
grub2
SUSE:Linux Micro 6.0
From an advisory covering 24 CVEs
 before 2.12~rc1-6.1
2.12~rc1-6.1
grub2
SUSE:Linux Micro 6.1
From an advisory covering 25 CVEs
 before 2.12-slfo.1.1_2.1
2.12-slfo.1.1_2.1
Show 19 moreShow less
Affected packages
PackageAffectedFixed
grub2
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
2.00-19ubuntu22.00-19ubuntu32.00-19ubuntu42.00-202.00-21
Show 23 moreShow less
2.00-222.02~beta2-52.02~beta2-62.02~beta2-72.02~beta2-82.02~beta2-92.02~beta2-9ubuntu12.02~beta2-9ubuntu1.12.02~beta2-9ubuntu1.22.02~beta2-9ubuntu1.32.02~beta2-9ubuntu1.42.02~beta2-9ubuntu1.52.02~beta2-9ubuntu1.62.02~beta2-9ubuntu1.72.02~beta2-9ubuntu1.82.02~beta2-9ubuntu1.112.02~beta2-9ubuntu1.122.02~beta2-9ubuntu1.142.02~beta2-9ubuntu1.152.02~beta2-9ubuntu1.162.02~beta2-9ubuntu1.172.02~beta2-9ubuntu1.202.02~beta2-9ubuntu1.21
 None known
grub2-signed
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
1.221.231.241.251.26
Show 23 moreShow less
1.271.301.311.321.331.341.34.11.34.21.34.31.34.41.34.51.34.61.34.71.34.81.34.91.34.131.34.141.34.161.34.171.34.181.34.201.34.221.34.24
 None known
grub2-signed
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.551.561.571.581.59
Show 32 moreShow less
1.611.621.631.641.651.661.66.11.66.21.66.61.66.71.66.81.66.91.66.111.66.121.66.141.66.151.66.161.66.171.66.181.66.191.66.201.66.211.66.221.66.231.66.261.66.271.66.281.66.291.167~16.04.11.167~16.04.21.167~16.04.41.167~16.04.6
 None known
grub2-unsigned
Ubuntu:16.04:LTS
 All versions, plus listed versions
2.04-1ubuntu442.04-1ubuntu44.12.04-1ubuntu44.1.2
 None known
grub2-signed
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.851.861.871.891.91
Show 27 moreShow less
1.921.931.93.11.93.21.93.31.93.41.93.51.93.71.93.81.93.101.93.111.93.131.93.141.93.151.93.161.93.181.93.191.93.201.93.211.93.221.93.241.167~18.04.11.167~18.04.31.167~18.04.51.173.2~18.04.11.187.2~18.04.11.187.3~18.04.1
 None known
grub2-unsigned
Ubuntu:18.04:LTS
 All versions, plus listed versions
2.04-1ubuntu442.04-1ubuntu44.12.04-1ubuntu44.1.22.04-1ubuntu47.42.06-2ubuntu142.06-2ubuntu14.1
 None known
grub2-signed
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.1281.1291.1301.1311.133
Show 27 moreShow less
1.1341.1351.1361.1371.1381.1391.1401.1411.1421.142.11.142.31.142.41.142.51.142.61.142.81.142.91.142.101.142.111.1671.167.21.173.2~20.04.11.173.41.187.2~20.04.21.187.3~20.04.11.187.4~20.04.11.187.6~20.04.11.187.12~20.04
 None known
grub2-unsigned
Ubuntu:20.04:LTS
 All versions, plus listed versions
2.04-1ubuntu442.04-1ubuntu44.22.04-1ubuntu47.42.04-1ubuntu47.52.06-2ubuntu14
Show 4 moreShow less
2.06-2ubuntu14.12.06-2ubuntu14.22.06-2ubuntu14.42.06-2ubuntu14.8
 None known
grub2-signed
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.1731.1741.1761.1771.178
Show 8 moreShow less
1.1791.1801.182~22.04.11.187.21.187.3~22.04.11.187.4~22.04.11.187.61.187.12
 None known
grub2-unsigned
Ubuntu:22.04:LTS
 All versions, plus listed versions
2.04-1ubuntu472.04-1ubuntu482.06-2ubuntu32.06-2ubuntu42.06-2ubuntu5
Show 8 moreShow less
2.06-2ubuntu62.06-2ubuntu72.06-2ubuntu102.06-2ubuntu142.06-2ubuntu14.12.06-2ubuntu14.22.06-2ubuntu14.42.06-2ubuntu14.8
 None known
grub2-signed
Ubuntu:24.04:LTS
 All versions, plus listed versions
1.1971.1991.2011.2021.202.21.202.5
 None known
grub2-unsigned
Ubuntu:24.04:LTS
 All versions, plus listed versions
2.12~rc1-10ubuntu42.12~rc1-12ubuntu22.12-1ubuntu12.12-1ubuntu72.12-1ubuntu7.12.12-1ubuntu7.3
 None known
grub2-signed
Ubuntu:25.10
 All versions, plus listed versions
1.2121.2131.214
 None known
grub2-unsigned
Ubuntu:25.10
 All versions, plus listed versions
2.12-5ubuntu112.14~git20250718.0e36779-1ubuntu12.14~git20250718.0e36779-1ubuntu4
 None known
grub2-signed
Ubuntu:26.10
 All versions, plus listed versions
1.215
 None known
grub2-unsigned
Ubuntu:26.10
 All versions, plus listed versions
2.14-2ubuntu1
 None known
grub2-signed
Ubuntu:26.04:LTS
 All versions, plus listed versions
1.2141.215
 None known
grub2-unsigned
Ubuntu:26.04:LTS
 All versions, plus listed versions
2.14~git20250718.0e36779-1ubuntu42.14-2ubuntu1
 None known
grub2
openSUSE:Tumbleweed
 before 2.12-28.1
2.12-28.1

History

History
RecordedChangedSources
affected, facts
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-49504 is a high vulnerability (CVSS 7.0) in Suse Opensuse Tumbleweed, published November 6, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 25th percentile. Fixed in grub2 2.04-41.oe2003sp4.

References

Show 62 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open