CVE-2024-56738

GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.

GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn.

Security Fix(es):

GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.(CVE-2024-56738)

GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.

GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.

GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.

• CVE-2024-56738: crypto: Data-dependent conditional in grub_crypto_memcmp() permits a timing side-channel observation

These are all security issues fixed in the grub2-2.12-56.1 package on the GA media of openSUSE Tumbleweed.

This update for grub2 fixes the following issues:

Changes in grub2:

• CVE-2025-54771: Fixed grub_file_close() does not properly controls the fs refcount (bsc#1252931)

• CVE-2025-54770: Fixed missing unregister call for net_set_vlan command may lead to use-after-free (bsc#1252930)

• CVE-2025-61662: Fixed missing unregister call for gettext command may lead to use-after-free (bsc#1252933)

• CVE-2025-61663: Fixed missing unregister call for normal commands may lead to use-after-free (bsc#1252934)

• CVE-2025-61664: Fixed missing unregister call for normal_exit command may lead to use-after-free (bsc#1252935)

• CVE-2025-61661: Fixed out-of-bounds write in grub_usb_get_string() function (bsc#1252932)

• Bump upstream SBAT generation to 6

• Fix "sparse file not allowed" error after grub2-reboot (bsc#1245738)

• Fix PowerPC network boot prefix to correctly locate grub.cfg (bsc#1249385)

• turn off page flipping for i386-pc using VBE video backend (bsc#1245636)

• Fix boot hangs in setting up serial console when ACPI SPCR table is present and redirection is disabled (bsc#1249088)

• Fix timeout when loading initrd via http after PPC CAS reboot (bsc#1245953)

• Skip mount point in grub_find_device function (bsc#1246231)

• CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grub_crypto_memcmp (bsc#1234959)

This update for grub2 fixes the following issues:

• CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grub_crypto_memcmp (bsc#1234959)

This update for grub2 fixes the following issues:

• CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grub_crypto_memcmp (bsc#1234959)

This update for grub2 fixes the following issues:

• CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grub_crypto_memcmp (bsc#1234959)

This update for grub2 fixes the following issues:

• CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grub_crypto_memcmp (bsc#1234959)

This update for grub2 fixes the following issues:

• CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grub_crypto_memcmp (bsc#1234959)

This update for grub2 fixes the following issues:

• CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grub_crypto_memcmp (bsc#1234959)

Other fixes:

• Fix test -f and -s do not work properly over the network files served via tftp and http (bsc#1246157, bsc#1246237)
• Skip mount point in grub_find_device function (bsc#1246231)

This update for grub2 fixes the following issues:

• CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grub_crypto_memcmp (bsc#1234959)

Other fixes:

• Fix test -f and -s do not work properly over the network files served via tftp and http (bsc#1246157, bsc#1246237)
• Skip mount point in grub_find_device function (bsc#1246231)

This update for grub2 fixes the following issues:

• CVE-2024-56738: Side-channel attack due to not constant-timealgorithm in grub_crypto_memcmp (bsc#1234959).

This update for grub2 fixes the following issues:

• Fix error: /boot/grub2/x86_64-efi/bli.mod not found (bsc#1231591)

• Fix OOM error in loading loopback file (bsc#1230840) (bsc#1249140)

• Update the patch to fix "SRK not matched" errors when unsealing the key (bsc#1232411) (bsc#1247242)

Security fixes for 2024:

• Bump upstream SBAT generation to 5

• CVE-2024-45774: Fixed heap overflows in JPEG parser (bsc#1233609)

• CVE-2024-45775: Fixed missing NULL check in extcmd parser (bsc#1233610)

• CVE-2024-45776: Fixed overflow in .MO file (gettext) handling (bsc#1233612)

• CVE-2024-45777: Fixed integer overflow in gettext (bsc#1233613)

• CVE-2024-45778: Fixed bfs filesystem not fuzzing stable (bsc#1233606)

• CVE-2024-45779: Fixed bfs heap overflow (bsc#1233608)

• CVE-2024-45780: Fixed overflow in tar/cpio (bsc#1233614)

• CVE-2024-45781: Fixed ufs strcpy overflow(bsc#1233617)

• CVE-2024-45782: Fixed hfs strcpy overflow (bsc#1233615)

• CVE-2024-45783: Fixed hfsplus refcount overflow (bsc#1233616)

• CVE-2024-49504: Fixed bypassing TPM-bound disk encryption on SL(E)M encrypted Images (bsc#1229163) (bsc#1229164)

• CVE-2024-56737: Fixed heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem (bsc#1234958)

• CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grub_crypto_memcmp (bsc#1234959)

• CVE-2025-0622: Fixed command/gpg use-after-free due to hooks not being removed on module unload (bsc#1236317)

• CVE-2025-0624: Fixed net Out-of-bounds write in grub_net_search_config_file() (bsc#1236316)

• CVE-2025-0677: Fixed UFS integer overflow may lead to heap based out-of-bounds write when handling symlinks (bsc#1237002)

• CVE-2025-0678: Fixed squash4 Integer overflow may lead to heap based out-of-bounds write when reading data (bsc#1237006)

• CVE-2025-0684: Fixed reiserfs Integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data (bsc#1237008)

• CVE-2025-0685: Fixed jfs Integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data (bsc#1237009)

• CVE-2025-0686: Fixed romfs Integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data (bsc#1237010)

• CVE-2025-0689: Fixed udf heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code execution (bsc#1237011)

• CVE-2025-0690: Fixed "read" integer overflow may lead to out-of-bounds write (bsc#1237012)

• CVE-2025-1118: Fixed commands/dump The dump command is not in lockdown when secure boot is enabled (bsc#1237013)

• CVE-2025-1125: Fixed fs/hfs interger overflow may lead to heap based out-of-bounds write (bsc#1237014)

• CVE-2025-4382: Fixed TPM auto-decryption data exposure (bsc#1242971)

• Restrict CLI access if the encrypted root device is automatically unlocked by the TPM. LUKS password authentication is required for access to be granted

This update for grub2 fixes the following issues:

Changes in grub2:

• CVE-2025-54771: Fixed grub_file_close() does not properly controls the fs refcount (bsc#1252931)

• CVE-2025-54770: Fixed missing unregister call for net_set_vlan command may lead to use-after-free (bsc#1252930)

• CVE-2025-61662: Fixed missing unregister call for gettext command may lead to use-after-free (bsc#1252933)

• CVE-2025-61663: Fixed missing unregister call for normal commands may lead to use-after-free (bsc#1252934)

• CVE-2025-61664: Fixed missing unregister call for normal_exit command may lead to use-after-free (bsc#1252935)

• CVE-2025-61661: Fixed out-of-bounds write in grub_usb_get_string() function (bsc#1252932)

• Bump upstream SBAT generation to 6

• Fix "sparse file not allowed" error after grub2-reboot (bsc#1245738)

• Fix PowerPC network boot prefix to correctly locate grub.cfg (bsc#1249385)

• turn off page flipping for i386-pc using VBE video backend (bsc#1245636)

• Fix boot hangs in setting up serial console when ACPI SPCR table is present and redirection is disabled (bsc#1249088)

• Fix timeout when loading initrd via http after PPC CAS reboot (bsc#1245953)

• Skip mount point in grub_find_device function (bsc#1246231)

• CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grub_crypto_memcmp (bsc#1234959)

This update for grub2 fixes the following issues:

Changes in grub2:

• CVE-2025-54771: Fixed grub_file_close() does not properly controls the fs refcount (bsc#1252931)

• CVE-2025-54770: Fixed missing unregister call for net_set_vlan command may lead to use-after-free (bsc#1252930)

• CVE-2025-61662: Fixed missing unregister call for gettext command may lead to use-after-free (bsc#1252933)

• CVE-2025-61663: Fixed missing unregister call for normal commands may lead to use-after-free (bsc#1252934)

• CVE-2025-61664: Fixed missing unregister call for normal_exit command may lead to use-after-free (bsc#1252935)

• CVE-2025-61661: Fixed out-of-bounds write in grub_usb_get_string() function (bsc#1252932)

• Bump upstream SBAT generation to 6

• Fix "sparse file not allowed" error after grub2-reboot (bsc#1245738)

• Fix PowerPC network boot prefix to correctly locate grub.cfg (bsc#1249385)

• turn off page flipping for i386-pc using VBE video backend (bsc#1245636)

• Fix boot hangs in setting up serial console when ACPI SPCR table is present and redirection is disabled (bsc#1249088)

• Fix timeout when loading initrd via http after PPC CAS reboot (bsc#1245953)

• Skip mount point in grub_find_device function (bsc#1246231)

• CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grub_crypto_memcmp (bsc#1234959)