{"id":"CVE-2021-3981","aliases":["ALSA-2022:2110","AZL-34786","AZL-8937","CLSA-2022-1669388927","CLSA-2022-1669390018","DEBIAN-CVE-2021-3981","EUVD-2021-27182","GHSA-6hfm-rxpf-979r","OESA-2022-1597","RHSA-2022:2110","RLSA-2022:2110","UBUNTU-CVE-2021-3981","USN-6355-1","openSUSE-SU-2024:11700-1"],"status":"published","title":"A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with...","description":"A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg. This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no version with the fix is currently released.","severity":{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.00319,"percentile":0.25173,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-276"],"published":"2022-03-08T14:02:15Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"grub2-common","fixed_in":["1:2.02-123.el8.alma"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"grub2-efi-aa64","fixed_in":["1:2.02-123.el8.alma"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"grub2-efi-aa64-cdboot","fixed_in":["1:2.02-123.el8.alma"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"grub2-efi-aa64-modules","fixed_in":["1:2.02-123.el8.alma"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"grub2-efi-ia32","fixed_in":["1:2.02-123.el8.alma"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"grub2-efi-ia32-cdboot","fixed_in":["1:2.02-123.el8.alma"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"grub2-efi-ia32-modules","fixed_in":["1:2.02-123.el8.alma"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"grub2-efi-x64","fixed_in":["1:2.02-123.el8.alma"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"grub2-efi-x64-cdboot","fixed_in":["1:2.02-123.el8.alma"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"grub2-efi-x64-modules","fixed_in":["1:2.02-123.el8.alma"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"grub2-pc","fixed_in":["1:2.02-123.el8.alma"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"grub2-pc-modules","fixed_in":["1:2.02-123.el8.alma"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"grub2-ppc64le","fixed_in":["1:2.02-123.el8_6.8.alma"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"grub2-ppc64le-modules","fixed_in":["1:2.02-123.el8.alma"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"grub2-tools","fixed_in":["1:2.02-123.el8.alma"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"grub2-tools-efi","fixed_in":["1:2.02-123.el8.alma"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"grub2-tools-extra","fixed_in":["1:2.02-123.el8.alma"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"grub2-tools-minimal","fixed_in":["1:2.02-123.el8.alma"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"grub2","fixed_in":["2.06-14"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"grub2","fixed_in":["2.06-5"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"grub2","fixed_in":["2.06-8"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"grub2","fixed_in":["2.06-8"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"grub2","fixed_in":["2.06-8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"grub2","fixed_in":["2.04-23.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"grub2","fixed_in":["2.04-23.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"grub2","fixed_in":["2.04-23.oe1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2","fixed_in":["1:2.02-123.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-common","fixed_in":["1:2.02-123.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-debuginfo","fixed_in":["1:2.02-123.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-debugsource","fixed_in":["1:2.02-123.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-aa64","fixed_in":["1:2.02-123.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-aa64-cdboot","fixed_in":["1:2.02-123.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-aa64-modules","fixed_in":["1:2.02-123.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-ia32","fixed_in":["1:2.02-123.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-ia32-cdboot","fixed_in":["1:2.02-123.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-ia32-modules","fixed_in":["1:2.02-123.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-x64","fixed_in":["1:2.02-123.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-x64-cdboot","fixed_in":["1:2.02-123.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-x64-modules","fixed_in":["1:2.02-123.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-pc","fixed_in":["1:2.02-123.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-pc-modules","fixed_in":["1:2.02-123.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-ppc64le","fixed_in":["1:2.02-123.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-ppc64le-modules","fixed_in":["1:2.02-123.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools","fixed_in":["1:2.02-123.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-debuginfo","fixed_in":["1:2.02-123.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-efi","fixed_in":["1:2.02-123.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-efi-debuginfo","fixed_in":["1:2.02-123.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-extra","fixed_in":["1:2.02-123.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-extra-debuginfo","fixed_in":["1:2.02-123.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-minimal","fixed_in":["1:2.02-123.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-minimal-debuginfo","fixed_in":["1:2.02-123.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"grub2","fixed_in":["1:2.02-123.el8"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"grub2-signed","fixed_in":["1.187.3~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"grub2-unsigned","fixed_in":["2.06-2ubuntu14.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"grub2-signed","fixed_in":["1.187.3~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"grub2-unsigned","fixed_in":["2.06-2ubuntu14.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"grub2","fixed_in":["2.06-13.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8.alma"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-efi-aa64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8.alma"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-efi-aa64-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8.alma"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-efi-aa64-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8.alma"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-efi-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8.alma"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-efi-ia32-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8.alma"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-efi-ia32-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8.alma"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-efi-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8.alma"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-efi-x64-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8.alma"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-efi-x64-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8.alma"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-pc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8.alma"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-pc-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8.alma"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8_6.8.alma"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-ppc64le-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8.alma"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8.alma"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-tools-efi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8.alma"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-tools-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8.alma"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"grub2-tools-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8.alma"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-14"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-5"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"grub2-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els2"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"grub2-efi-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els2"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"grub2-efi-ia32-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els2"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"grub2-efi-ia32-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els2"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"grub2-efi-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els2"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"grub2-efi-x64-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els2"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"grub2-efi-x64-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els2"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"grub2-pc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els2"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"grub2-pc-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els2"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"grub2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els2"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"grub2-tools-efi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els2"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"grub2-tools-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els2"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"grub2-tools-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els2"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"grub2-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els2"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"grub2-efi-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els2"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"grub2-efi-ia32-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els2"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"grub2-efi-ia32-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els2"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"grub2-efi-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els2"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"grub2-efi-x64-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els2"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"grub2-efi-x64-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els2"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"grub2-pc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els2"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"grub2-pc-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els2"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"grub2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els2"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"grub2-tools-efi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els2"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"grub2-tools-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els2"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"grub2-tools-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-106.el8.tuxcare.els2"}]}],"bundled":7},{"source":"osv","ecosystem":"Debian:12","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-8"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-8"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.04-23.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.04-23.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.04-23.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-aa64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-aa64-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-aa64-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-ia32","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-ia32-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-ia32-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-x64-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-efi-x64-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-pc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-pc-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-ppc64le-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-efi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-efi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-extra-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"grub2-tools-minimal-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.02-123.el8"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"grub2-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.22","1.23","1.24","1.25","1.26","1.27","1.30","1.31","1.32","1.33","1.34","1.34.1","1.34.2","1.34.3","1.34.4","1.34.5","1.34.6","1.34.7","1.34.8","1.34.9","1.34.13","1.34.14","1.34.16","1.34.17","1.34.18","1.34.20","1.34.22","1.34.24"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"grub2-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.55","1.56","1.57","1.58","1.59","1.61","1.62","1.63","1.64","1.65","1.66","1.66.1","1.66.2","1.66.6","1.66.7","1.66.8","1.66.9","1.66.11","1.66.12","1.66.14","1.66.15","1.66.16","1.66.17","1.66.18","1.66.19","1.66.20","1.66.21","1.66.22","1.66.23","1.66.26","1.66.27","1.66.28","1.66.29","1.167~16.04.1","1.167~16.04.2","1.167~16.04.4","1.167~16.04.6"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"grub2-unsigned","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.04-1ubuntu44","2.04-1ubuntu44.1","2.04-1ubuntu44.1.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"grub2-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.85","1.86","1.87","1.89","1.91","1.92","1.93","1.93.1","1.93.2","1.93.3","1.93.4","1.93.5","1.93.7","1.93.8","1.93.10","1.93.11","1.93.13","1.93.14","1.93.15","1.93.16","1.93.18","1.93.19","1.93.20","1.93.21","1.93.22","1.93.24","1.167~18.04.1","1.167~18.04.3","1.167~18.04.5","1.173.2~18.04.1","1.187.2~18.04.1","1.187.3~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"grub2-unsigned","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.04-1ubuntu44","2.04-1ubuntu44.1","2.04-1ubuntu44.1.2","2.04-1ubuntu47.4","2.06-2ubuntu14","2.06-2ubuntu14.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"grub2-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.187.3~20.04.1"}]}],"versions":["1.128","1.129","1.130","1.131","1.133","1.134","1.135","1.136","1.137","1.138","1.139","1.140","1.141","1.142","1.142.1","1.142.3","1.142.4","1.142.5","1.142.6","1.142.8","1.142.9","1.142.10","1.142.11","1.167","1.167.2","1.173.2~20.04.1","1.173.4","1.187.2~20.04.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"grub2-unsigned","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-2ubuntu14.1"}]}],"versions":["2.04-1ubuntu44","2.04-1ubuntu44.2","2.04-1ubuntu47.4","2.04-1ubuntu47.5","2.06-2ubuntu14"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"grub2-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.187.3~22.04.1"}]}],"versions":["1.173","1.174","1.176","1.177","1.178","1.179","1.180","1.182~22.04.1","1.187.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"grub2-unsigned","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-2ubuntu14.1"}]}],"versions":["2.04-1ubuntu47","2.04-1ubuntu48","2.06-2ubuntu3","2.06-2ubuntu4","2.06-2ubuntu5","2.06-2ubuntu6","2.06-2ubuntu7","2.06-2ubuntu10","2.06-2ubuntu14"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"grub2-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.187.3~20.04.1"}]}],"versions":["1.128","1.129","1.130","1.131","1.133","1.134","1.135","1.136","1.137","1.138","1.139","1.140","1.141","1.142","1.142.1","1.142.3","1.142.4","1.142.5","1.142.6","1.142.8","1.142.9","1.142.10","1.142.11","1.167","1.167.2","1.173.2~20.04.1","1.173.4","1.187.2~20.04.2"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"grub2-unsigned","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-2ubuntu14.1"}]}],"versions":["2.04-1ubuntu44","2.04-1ubuntu44.2","2.04-1ubuntu47.4","2.04-1ubuntu47.5","2.06-2ubuntu14"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.7-0ubuntu1"}]}],"versions":["15+1533136590.3beb971-0ubuntu1","15+1552672080.a4a1fbe-0ubuntu1","15+1552672080.a4a1fbe-0ubuntu2","15.4-0ubuntu7","15.4-0ubuntu9"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"shim-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.40.9"}]}],"versions":["1.39","1.40","1.40.3","1.40.4","1.40.6","1.40.7"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"grub2-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.187.3~22.04.1"}]}],"versions":["1.173","1.174","1.176","1.177","1.178","1.179","1.180","1.182~22.04.1","1.187.2"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"grub2-unsigned","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-2ubuntu14.1"}]}],"versions":["2.04-1ubuntu47","2.04-1ubuntu48","2.06-2ubuntu3","2.06-2ubuntu4","2.06-2ubuntu5","2.06-2ubuntu6","2.06-2ubuntu7","2.06-2ubuntu10","2.06-2ubuntu14"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"shim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.7-0ubuntu1"}]}],"versions":["15.4-0ubuntu9"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"shim-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.51.3"}]}],"versions":["1.51"],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-13.1"}]}]}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"gnu","product":"grub2"}],"references":[{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AI776L35DDYPCSAAJPJM3ZEQYSFZHBJX/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2024170","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix","report"]},{"url":"https://security.gentoo.org/glsa/202209-12","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2024/01/15/3","tags":["x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3981","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AI776L35DDYPCSAAJPJM3ZEQYSFZHBJX/"},{"url":"https://access.redhat.com/errata/RHSA-2022:2110","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3981","tags":["report"]},{"url":"https://github.com/advisories/GHSA-6hfm-rxpf-979r"},{"url":"https://errata.almalinux.org/8/ALSA-2022-2110.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2021-3981","tags":["report"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2022-1669388927.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2022-1669390018.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-3981","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1597","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.6_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1809246","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1899903","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1914575","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2016269","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2020927","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2048904","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2061252","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2069157","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_2110.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3981","tags":["advisory","report"]},{"url":"https://errata.rockylinux.org/RLSA-2022:2110","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-3981","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6355-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-3695","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3696","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2021-3697","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-3775","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-28733","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-28734","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-28735","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-28736","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-28737","tags":["report"]},{"url":"https://launchpad.net/bugs/2029518","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3981","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-3981","description":"A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg. This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no version with the fix is currently released.","status":"published","published":"2022-03-08T14:02:15Z","modified":"2025-02-13T16:28:29.161Z","cwes":["CWE-276"],"updated_at":"2026-11-02T14:33:04.020035Z"}],"euvd":[{"id":"EUVD-2021-27182","description":"A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg. This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no version with the fix is currently released.","status":"published","published":"2022-03-08T14:02:15Z","modified":"2025-02-13T16:28:29Z","updated_at":"2026-11-03T00:03:52.752782Z"}],"ghsa":[{"id":"GHSA-6hfm-rxpf-979r","title":"A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with...","description":"A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg. This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no version with the fix is currently released.","status":"published","published":"2022-03-11T00:02:31Z","modified":"2024-01-24T05:07:45Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:55:28.44427Z"}],"nvd":[{"id":"CVE-2021-3981","description":"A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg. This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no version with the fix is currently released.","status":"published","published":"2022-03-10T17:43:14.77Z","modified":"2026-06-17T04:06:20.127Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:07:05.198719Z"}],"osv":[{"id":"AZL-34786","title":"CVE-2021-3981 affecting package grub2 for versions less than 2.06-14","description":"A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg. This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no version with the fix is currently released.","status":"published","published":"2022-03-10T17:43:14Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-05T16:41:19.380321Z"},{"id":"AZL-8937","title":"CVE-2021-3981 affecting package grub2 for versions less than 2.06-5","description":"A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg. This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no version with the fix is currently released.","status":"published","published":"2022-03-10T17:43:14Z","modified":"2026-04-21T04:34:55.939012Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:28:11.069402Z"},{"id":"CVE-2021-3981","description":"A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg. This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no version with the fix is currently released.","status":"published","published":"2022-03-10T17:43:14.77Z","modified":"2026-03-15T14:44:36.667869Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:44:20.843843Z"},{"id":"DEBIAN-CVE-2021-3981","description":"A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg. This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no version with the fix is currently released.","status":"published","published":"2022-03-10T17:43:14.77Z","modified":"2026-10-23T18:04:00.212655083Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:45:35.521549Z"},{"id":"OESA-2022-1597","title":"grub2 security update","description":"GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn.\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg. This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no version with the fix is currently released.(CVE-2021-3981)","status":"published","published":"2022-03-26T11:04:52Z","modified":"2026-08-18T01:15:54.56790257Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2022:2110","title":"Red Hat Security Advisory: grub2 security, bug fix, and enhancement update","status":"published","published":"2024-09-16T07:24:02Z","modified":"2026-07-21T10:01:35Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RLSA-2022:2110","title":"Low: grub2 security, bug fix, and enhancement update","description":"The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.\n\nSecurity Fix(es):\n\n* grub2: Incorrect permission in grub.cfg allow unprivileged user to read the file content (CVE-2021-3981)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.6 Release Notes linked from the References section.","status":"published","published":"2022-05-10T08:17:41Z","modified":"2026-02-04T13:45:09.944882Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2021-3981","description":"A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg. This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no version with the fix is currently released.","status":"published","published":"2022-03-10T17:43:00Z","modified":"2026-02-04T04:34:45.221583Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"updated_at":"2026-11-02T15:54:28.526929Z"},{"id":"ALSA-2022:2110","title":"Low: grub2 security, bug fix, and enhancement update","description":"The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.\n\nSecurity Fix(es):\n\n* grub2: Incorrect permission in grub.cfg allow unprivileged user to read the file content (CVE-2021-3981)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-05-10T08:17:41Z","modified":"2026-10-29T11:01:05.816823865Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"CLSA-2022-1669388927","title":"grub2: Fix of 7 CVEs","description":"- CVE-2021-3981: Fix default privileges of grub.cfg file\n- CVE-2022-28736: Fix use-after-free bug when grub_cmd_chainloader is executed\n  more than once before a boot attempt is performed.\n- CVE-2021-3695: Drop greyscale support to fix heap out-of-bounds write\n- CVE-2021-3696: Fix out of range insertion into huffman table\n- CVE-2021-3697: Fix integer undeflow which resulted in wild pointer write\n- CVE-2022-28733: Fix integer underflow which resulted in subsequent unpleasantness\n- CVE-2022-28734: Fix erros in handling of split http headers","status":"published","published":"2022-11-25T15:08:47Z","modified":"2026-10-21T10:48:05.460126957Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"CLSA-2022-1669390018","title":"grub2: Fix of 7 CVEs","description":"- CVE-2021-3981: Fix default privileges of grub.cfg file\n- CVE-2022-28736: Fix use-after-free bug when grub_cmd_chainloader is executed\n  more than once before a boot attempt is performed.\n- CVE-2021-3695: Drop greyscale support to fix heap out-of-bounds write\n- CVE-2021-3696: Fix out of range insertion into huffman table\n- CVE-2021-3697: Fix integer undeflow which resulted in wild pointer write\n- CVE-2022-28733: Fix integer underflow which resulted in subsequent unpleasantness\n- CVE-2022-28734: Fix erros in handling of split http headers","status":"published","published":"2022-11-25T15:26:58Z","modified":"2026-10-21T10:48:23.966970416Z","updated_at":"2026-11-02T15:43:40.176048Z"},{"id":"openSUSE-SU-2024:11700-1","title":"grub2-2.06-13.1 on GA media","description":"These are all security issues fixed in the grub2-2.06-13.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:16:23.890989Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"USN-6355-1","title":"grub2-signed, grub2-unsigned, shim, and shim-signed vulnerability","description":"Daniel Axtens discovered that specially crafted images could cause a\nheap-based out-of-bonds write. A local attacker could possibly use\nthis to circumvent secure boot protections. (CVE-2021-3695)\n\nDaniel Axtens discovered that specially crafted images could cause\nout-of-bonds read and write. A local attacker could possibly use this\nto circumvent secure boot protections. (CVE-2021-3696)\n\nDaniel Axtens discovered that specially crafted images could cause\nbuffer underwrite which allows arbitrary data to be written to a heap.\nA local attacker could possibly use this to circumvent secure\nboot protections. (CVE-2021-3697)\n\nIt was discovered that GRUB2 configuration files were created with\nthe wrong permissions. An attacker could possibly use this to leak\nencrypted passwords. (CVE-2021-3981)\n\nDaniel Axtens discovered that specially crafted IP packets could cause\nan integer underflow and write past the end of a buffer. An attacker\ncould possibly use this to circumvent secure boot protections.\n(CVE-2022-28733)\n\nDaniel Axtens discovered that specially crafted HTTP headers can cause\nan out-of-bounds write of a NULL byte. An attacker could possibly use\nthis to corrupt GRUB2's internal data. (CVE-2022-28734)\n\nJulian Andres Klode discovered that GRUB2 shim_lock allowed non-\nkernel files to be loaded. A local attack could possibly use this to\ncircumvent secure boot protections. (CVE-2022-28735)\n\nChris Coulson discovered that executing chainloaders more than once\ncaused a use-after-free vulnerability. A local attack could possibly\nuse this to circumvent secure boot protections. (CVE-2022-28736)\n\nChris Coulson discovered that specially crafted executables could\ncause shim to make out-of-bound writes. A local attack could possibly\nuse this to circumvent secure boot protections. (CVE-2022-28737)\n\nZhang Boyang discovered that specially crafted unicode sequences\ncould lead to an out-of-bounds write to a heap. A local attacker could\npossibly use this to circumvent secure boot protections.\n(CVE-2022-3775)\n","status":"published","published":"2023-09-08T21:56:31Z","modified":"2026-05-29T18:00:45.326898665Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}