{"id":"CVE-2024-56738","aliases":["AZL-54692","AZL-54709","BELL-CVE-2024-56738","CLSA-2026-1788432569","DEBIAN-CVE-2024-56738","EUVD-2024-53381","GHSA-9gmj-v2m8-qffv","OESA-2025-1675","SUSE-SU-2025:02705-1","SUSE-SU-2025:02706-1","SUSE-SU-2025:02724-1","SUSE-SU-2025:02725-1","SUSE-SU-2025:02727-1","SUSE-SU-2025:02772-1","SUSE-SU-2025:02813-1","SUSE-SU-2025:20654-1","SUSE-SU-2025:20863-1","SUSE-SU-2025:21212-1","SUSE-SU-2025:21223-1","UBUNTU-CVE-2024-56738","openSUSE-SU-2025:15400-1","openSUSE-SU-2025:20163-1"],"status":"published","title":"GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp...","description":"GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00405,"percentile":0.35175,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-203","CWE-208"],"published":"2024-12-29T00:00:00Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-common","fixed_in":["1:2.06-61.el9_2.1.alma.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-efi-aa64-modules","fixed_in":["1:2.06-61.el9_2.1.alma.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-efi-x64","fixed_in":["1:2.06-61.el9_2.1.alma.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-efi-x64-cdboot","fixed_in":["1:2.06-61.el9_2.1.alma.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-efi-x64-modules","fixed_in":["1:2.06-61.el9_2.1.alma.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-emu","fixed_in":["1:2.06-61.el9_2.1.alma.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-emu-modules","fixed_in":["1:2.06-61.el9_2.1.alma.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-pc","fixed_in":["1:2.06-61.el9_2.1.alma.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-pc-modules","fixed_in":["1:2.06-61.el9_2.1.alma.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-tools","fixed_in":["1:2.06-61.el9_2.1.alma.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-tools-efi","fixed_in":["1:2.06-61.el9_2.1.alma.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-tools-extra","fixed_in":["1:2.06-61.el9_2.1.alma.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-tools-minimal","fixed_in":["1:2.06-61.el9_2.1.alma.tuxcare.els11"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"grub2","fixed_in":["2.12-40.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"grub2","fixed_in":["2.12-40.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"grub2","fixed_in":["2.04-41.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"grub2","fixed_in":["2.06-52.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"grub2","fixed_in":["2.06-52.oe2203sp4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"grub2","fixed_in":["2.04-150300.22.58.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"grub2","fixed_in":["2.06-150500.29.53.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"grub2","fixed_in":["2.04-150300.3.14.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"grub2","fixed_in":["2.02-190.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"grub2","fixed_in":["2.06-150400.11.63.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"grub2","fixed_in":["2.06-150400.11.63.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"grub2","fixed_in":["2.12-150600.8.34.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"grub2","fixed_in":["2.12-150600.8.34.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"grub2","fixed_in":["2.12-150600.8.34.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"grub2","fixed_in":["2.12-150700.19.13.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"grub2","fixed_in":["2.12-150700.19.13.2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"grub2","fixed_in":["2.12~rc1-7.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"grub2","fixed_in":["2.12-56.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.06-16"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.06-28"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"grub","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.06-r9"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"grub","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.06-r14"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-61.el9_2.1.alma.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-efi-aa64-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-61.el9_2.1.alma.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-efi-x64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-61.el9_2.1.alma.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-efi-x64-cdboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-61.el9_2.1.alma.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-efi-x64-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-61.el9_2.1.alma.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-emu","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-61.el9_2.1.alma.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-emu-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-61.el9_2.1.alma.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-pc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-61.el9_2.1.alma.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-pc-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-61.el9_2.1.alma.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-61.el9_2.1.alma.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-tools-efi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-61.el9_2.1.alma.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-tools-extra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-61.el9_2.1.alma.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"grub2-tools-minimal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.06-61.el9_2.1.alma.tuxcare.els11"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.06-13","2.06-13+deb12u1","2.06-13+deb12u2","2.06-13+hurd.1","2.06-13+hurd.2","2.06-14","2.12-1","2.12-1.1","2.12-1~bpo12+1","2.12-2","2.12-2~deb13u1","2.12-3","2.12-4","2.12-5","2.12-5+hurd.1","2.12-6","2.12-7","2.12-8","2.12-9","2.12-9+hurd.1","2.12~rc1-1","2.12~rc1-10","2.12~rc1-11","2.12~rc1-12","2.12~rc1-13","2.12~rc1-2","2.12~rc1-3","2.12~rc1-6","2.12~rc1-7","2.12~rc1-8","2.12~rc1-9","2.14-1","2.14-2","2.14-3","2.14-4","2.14~git20250718.0e36779-1","2.14~git20250718.0e36779-2","2.16-1"]},{"source":"osv","ecosystem":"Debian:13","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.12-9","2.12-9+deb13u1","2.12-9+deb13u2","2.12-9+hurd.1","2.14-1","2.14-2","2.14-3","2.14-4","2.14~git20250718.0e36779-1","2.14~git20250718.0e36779-2","2.16-1"]},{"source":"osv","ecosystem":"Debian:14","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.12-9","2.12-9+hurd.1","2.14-1","2.14-2","2.14-3","2.14-4","2.14~git20250718.0e36779-1","2.14~git20250718.0e36779-2","2.16-1"]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12-40.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12-40.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.04-41.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-52.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-52.oe2203sp4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.04-150300.22.58.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-150500.29.53.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.04-150300.3.14.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.02-190.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-150400.11.63.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.06-150400.11.63.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12-150600.8.34.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP6","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12-150600.8.34.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12-150600.8.34.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12-150700.19.13.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12-150700.19.13.2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12~rc1-7.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12-slfo.1.1_2.1"}]}],"bundled":25},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12-160000.3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12-160000.3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12-160000.3.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.00-19ubuntu2","2.00-19ubuntu3","2.00-19ubuntu4","2.00-20","2.00-21","2.00-22","2.02~beta2-5","2.02~beta2-6","2.02~beta2-7","2.02~beta2-8","2.02~beta2-9","2.02~beta2-9ubuntu1","2.02~beta2-9ubuntu1.1","2.02~beta2-9ubuntu1.2","2.02~beta2-9ubuntu1.3","2.02~beta2-9ubuntu1.4","2.02~beta2-9ubuntu1.5","2.02~beta2-9ubuntu1.6","2.02~beta2-9ubuntu1.7","2.02~beta2-9ubuntu1.8","2.02~beta2-9ubuntu1.11","2.02~beta2-9ubuntu1.12","2.02~beta2-9ubuntu1.14","2.02~beta2-9ubuntu1.15","2.02~beta2-9ubuntu1.16","2.02~beta2-9ubuntu1.17","2.02~beta2-9ubuntu1.20","2.02~beta2-9ubuntu1.21"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"grub2-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.22","1.23","1.24","1.25","1.26","1.27","1.30","1.31","1.32","1.33","1.34","1.34.1","1.34.2","1.34.3","1.34.4","1.34.5","1.34.6","1.34.7","1.34.8","1.34.9","1.34.13","1.34.14","1.34.16","1.34.17","1.34.18","1.34.20","1.34.22","1.34.24"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"grub2-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.55","1.56","1.57","1.58","1.59","1.61","1.62","1.63","1.64","1.65","1.66","1.66.1","1.66.2","1.66.6","1.66.7","1.66.8","1.66.9","1.66.11","1.66.12","1.66.14","1.66.15","1.66.16","1.66.17","1.66.18","1.66.19","1.66.20","1.66.21","1.66.22","1.66.23","1.66.26","1.66.27","1.66.28","1.66.29","1.167~16.04.1","1.167~16.04.2","1.167~16.04.4","1.167~16.04.6"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"grub2-unsigned","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.04-1ubuntu44","2.04-1ubuntu44.1","2.04-1ubuntu44.1.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"grub2-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.85","1.86","1.87","1.89","1.91","1.92","1.93","1.93.1","1.93.2","1.93.3","1.93.4","1.93.5","1.93.7","1.93.8","1.93.10","1.93.11","1.93.13","1.93.14","1.93.15","1.93.16","1.93.18","1.93.19","1.93.20","1.93.21","1.93.22","1.93.24","1.167~18.04.1","1.167~18.04.3","1.167~18.04.5","1.173.2~18.04.1","1.187.2~18.04.1","1.187.3~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"grub2-unsigned","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.04-1ubuntu44","2.04-1ubuntu44.1","2.04-1ubuntu44.1.2","2.04-1ubuntu47.4","2.06-2ubuntu14","2.06-2ubuntu14.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"grub2-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.128","1.129","1.130","1.131","1.133","1.134","1.135","1.136","1.137","1.138","1.139","1.140","1.141","1.142","1.142.1","1.142.3","1.142.4","1.142.5","1.142.6","1.142.8","1.142.9","1.142.10","1.142.11","1.167","1.167.2","1.173.2~20.04.1","1.173.4","1.187.2~20.04.2","1.187.3~20.04.1","1.187.4~20.04.1","1.187.6~20.04.1","1.187.12~20.04"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"grub2-unsigned","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.04-1ubuntu44","2.04-1ubuntu44.2","2.04-1ubuntu47.4","2.04-1ubuntu47.5","2.06-2ubuntu14","2.06-2ubuntu14.1","2.06-2ubuntu14.2","2.06-2ubuntu14.4","2.06-2ubuntu14.8"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"grub2-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.173","1.174","1.176","1.177","1.178","1.179","1.180","1.182~22.04.1","1.187.2","1.187.3~22.04.1","1.187.4~22.04.1","1.187.6","1.187.12"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"grub2-unsigned","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.04-1ubuntu47","2.04-1ubuntu48","2.06-2ubuntu3","2.06-2ubuntu4","2.06-2ubuntu5","2.06-2ubuntu6","2.06-2ubuntu7","2.06-2ubuntu10","2.06-2ubuntu14","2.06-2ubuntu14.1","2.06-2ubuntu14.2","2.06-2ubuntu14.4","2.06-2ubuntu14.8"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"grub2-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.197","1.199","1.201","1.202","1.202.2","1.202.5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"grub2-unsigned","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.12~rc1-10ubuntu4","2.12~rc1-12ubuntu2","2.12-1ubuntu1","2.12-1ubuntu7","2.12-1ubuntu7.1","2.12-1ubuntu7.3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"grub2-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.212","1.213","1.214"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"grub2-unsigned","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.12-5ubuntu11","2.14~git20250718.0e36779-1ubuntu1","2.14~git20250718.0e36779-1ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"grub2-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.215"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"grub2-unsigned","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.14-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"grub2-signed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.214","1.215"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"grub2-unsigned","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.14~git20250718.0e36779-1ubuntu4","2.14-2ubuntu1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12-56.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12-160000.3.1"}]}],"bundled":7}],"products":[{"vendor":"gnu","product":"grub2"}],"references":[{"url":"https://savannah.gnu.org/bugs/?66603","tags":["Issue Tracking","Third Party Advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-56738","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-9gmj-v2m8-qffv"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2024-56738","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1788432569.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-56738","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1675","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502705-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1234959","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-56738","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502706-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502724-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502725-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502727-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502772-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1246157","tags":["report"]},{"url":"https://bugzilla.suse.com/1246231","tags":["report"]},{"url":"https://bugzilla.suse.com/1246237","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502813-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520654-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520863-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1229163","tags":["report"]},{"url":"https://bugzilla.suse.com/1229164","tags":["report"]},{"url":"https://bugzilla.suse.com/1230840","tags":["report"]},{"url":"https://bugzilla.suse.com/1231591","tags":["report"]},{"url":"https://bugzilla.suse.com/1232411","tags":["report"]},{"url":"https://bugzilla.suse.com/1233606","tags":["report"]},{"url":"https://bugzilla.suse.com/1233608","tags":["report"]},{"url":"https://bugzilla.suse.com/1233609","tags":["report"]},{"url":"https://bugzilla.suse.com/1233610","tags":["report"]},{"url":"https://bugzilla.suse.com/1233612","tags":["report"]},{"url":"https://bugzilla.suse.com/1233613","tags":["report"]},{"url":"https://bugzilla.suse.com/1233614","tags":["report"]},{"url":"https://bugzilla.suse.com/1233615","tags":["report"]},{"url":"https://bugzilla.suse.com/1233616","tags":["report"]},{"url":"https://bugzilla.suse.com/1233617","tags":["report"]},{"url":"https://bugzilla.suse.com/1234958","tags":["report"]},{"url":"https://bugzilla.suse.com/1236316","tags":["report"]},{"url":"https://bugzilla.suse.com/1236317","tags":["report"]},{"url":"https://bugzilla.suse.com/1237002","tags":["report"]},{"url":"https://bugzilla.suse.com/1237006","tags":["report"]},{"url":"https://bugzilla.suse.com/1237008","tags":["report"]},{"url":"https://bugzilla.suse.com/1237009","tags":["report"]},{"url":"https://bugzilla.suse.com/1237010","tags":["report"]},{"url":"https://bugzilla.suse.com/1237011","tags":["report"]},{"url":"https://bugzilla.suse.com/1237012","tags":["report"]},{"url":"https://bugzilla.suse.com/1237013","tags":["report"]},{"url":"https://bugzilla.suse.com/1237014","tags":["report"]},{"url":"https://bugzilla.suse.com/1242971","tags":["report"]},{"url":"https://bugzilla.suse.com/1247242","tags":["report"]},{"url":"https://bugzilla.suse.com/1249140","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45780","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45781","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-56737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0622","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0624","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0677","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0678","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0684","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0685","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0689","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0690","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1118","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1125","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-4382","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202521212-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1245636","tags":["report"]},{"url":"https://bugzilla.suse.com/1245738","tags":["report"]},{"url":"https://bugzilla.suse.com/1245953","tags":["report"]},{"url":"https://bugzilla.suse.com/1249088","tags":["report"]},{"url":"https://bugzilla.suse.com/1249385","tags":["report"]},{"url":"https://bugzilla.suse.com/1252930","tags":["report"]},{"url":"https://bugzilla.suse.com/1252931","tags":["report"]},{"url":"https://bugzilla.suse.com/1252932","tags":["report"]},{"url":"https://bugzilla.suse.com/1252933","tags":["report"]},{"url":"https://bugzilla.suse.com/1252934","tags":["report"]},{"url":"https://bugzilla.suse.com/1252935","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54770","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-54771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61661","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61662","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-61664","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202521223-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-56738","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-56738","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-56738","description":"GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.","status":"published","published":"2024-12-29T00:00:00Z","modified":"2024-12-31T18:15:24.931Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-208"],"updated_at":"2026-11-02T14:33:57.983942Z"}],"euvd":[{"id":"EUVD-2024-53381","description":"GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.","status":"published","published":"2024-12-29T00:00:00Z","modified":"2024-12-31T18:15:24Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:04:31.712293Z"}],"ghsa":[{"id":"GHSA-9gmj-v2m8-qffv","title":"GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp...","description":"GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.","status":"published","published":"2024-12-29T09:30:46Z","modified":"2024-12-31T21:31:52Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-208"],"updated_at":"2026-11-02T14:59:18.102288Z"}],"nvd":[{"id":"CVE-2024-56738","description":"GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.","status":"published","published":"2024-12-29T07:15:06.183Z","modified":"2026-06-17T08:12:52.383Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-208","CWE-203"],"updated_at":"2026-11-02T14:10:41.091507Z"}],"osv":[{"id":"BELL-CVE-2024-56738","status":"published","published":"2025-01-02T05:58:36.714053Z","modified":"2026-01-26T09:41:17.591094Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:20.963569Z"},{"id":"CVE-2024-56738","description":"GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.","status":"published","published":"2024-12-29T07:15:06.183Z","modified":"2026-04-10T05:15:13.170495Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:44.777182Z"},{"id":"DEBIAN-CVE-2024-56738","description":"GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.","status":"published","published":"2024-12-29T07:15:06.183Z","modified":"2026-11-02T12:03:15.264735645Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:44.429177Z"},{"id":"OESA-2025-1675","title":"grub2 security update","description":"GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn.\r\n\r\nSecurity Fix(es):\n\nGNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.(CVE-2024-56738)","status":"published","published":"2025-06-27T11:08:46Z","modified":"2026-08-18T01:18:01.572095077Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"UBUNTU-CVE-2024-56738","description":"GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.","status":"published","published":"2024-12-29T07:15:00Z","modified":"2026-10-17T12:56:46.202244699Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:55:15.331356Z"},{"id":"AZL-54692","title":"CVE-2024-56738 affecting package grub2 2.06-16","description":"GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.","status":"published","published":"2024-12-29T07:15:06Z","modified":"2026-04-21T04:35:40.190738Z","updated_at":"2026-11-02T15:28:06.879785Z"},{"id":"AZL-54709","title":"CVE-2024-56738 affecting package grub2 2.06-28","description":"GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.","status":"published","published":"2024-12-29T07:15:06Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:20.996398Z"},{"id":"CLSA-2026-1788432569","title":"grub2: Fix of CVE-2024-56738","description":"- CVE-2024-56738: crypto: Data-dependent conditional in grub_crypto_memcmp()\n  permits a timing side-channel observation","status":"published","published":"2026-09-03T10:49:39Z","modified":"2026-10-26T09:30:44.447592088Z","updated_at":"2026-11-02T15:43:47.591214Z"},{"id":"openSUSE-SU-2025:15400-1","title":"grub2-2.12-56.1 on GA media","description":"These are all security issues fixed in the grub2-2.12-56.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-08-03T00:00:00Z","modified":"2026-03-23T04:53:43.818649Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:20163-1","title":"Security update for grub2","description":"This update for grub2 fixes the following issues:\n\nChanges in grub2:\n\n- CVE-2025-54771: Fixed grub_file_close() does not properly controls the fs refcount (bsc#1252931)\n- CVE-2025-54770: Fixed missing unregister call for net_set_vlan command may lead to use-after-free  (bsc#1252930)\n- CVE-2025-61662: Fixed missing unregister call for gettext command may lead to use-after-free (bsc#1252933)\n- CVE-2025-61663: Fixed missing unregister call for normal commands may lead to use-after-free (bsc#1252934)\n- CVE-2025-61664: Fixed missing unregister call for normal_exit command may lead to use-after-free (bsc#1252935)\n- CVE-2025-61661: Fixed out-of-bounds write in grub_usb_get_string() function (bsc#1252932)\n\n- Bump upstream SBAT generation to 6\n\n- Fix \"sparse file not allowed\" error after grub2-reboot (bsc#1245738)\n- Fix PowerPC network boot prefix to correctly locate grub.cfg (bsc#1249385)\n- turn off page flipping for i386-pc using VBE video backend (bsc#1245636)\n- Fix boot hangs in setting up serial console when ACPI SPCR table is present\n  and redirection is disabled (bsc#1249088)\n- Fix timeout when loading initrd via http after PPC CAS reboot (bsc#1245953)\n- Skip mount point in grub_find_device function (bsc#1246231)\n\n- CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grub_crypto_memcmp (bsc#1234959)\n","status":"published","published":"2025-12-15T12:52:50Z","modified":"2026-03-23T04:54:18.975294Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"SUSE-SU-2025:02705-1","title":"Security update for grub2","description":"This update for grub2 fixes the following issues:\n\n- CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grub_crypto_memcmp (bsc#1234959)\n","status":"published","published":"2025-08-05T10:08:15Z","modified":"2026-02-04T02:53:01.278892Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:02706-1","title":"Security update for grub2","description":"This update for grub2 fixes the following issues:\n\n- CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grub_crypto_memcmp (bsc#1234959)\n","status":"published","published":"2025-08-05T10:08:31Z","modified":"2026-02-04T03:29:06.647206Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:02724-1","title":"Security update for grub2","description":"This update for grub2 fixes the following issues:\n\n- CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grub_crypto_memcmp (bsc#1234959)\n","status":"published","published":"2025-08-07T09:01:39Z","modified":"2026-02-04T02:55:04.12757Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:02725-1","title":"Security update for grub2","description":"This update for grub2 fixes the following issues:\n\n- CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grub_crypto_memcmp (bsc#1234959)\n","status":"published","published":"2025-08-07T09:01:46Z","modified":"2026-02-04T04:17:44.666486Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:02727-1","title":"Security update for grub2","description":"This update for grub2 fixes the following issues:\n\n- CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grub_crypto_memcmp (bsc#1234959)\n","status":"published","published":"2025-08-07T09:02:11Z","modified":"2026-02-04T03:14:00.140777Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:02772-1","title":"Recommended update for grub2","description":"This update for grub2 fixes the following issues:\n\n- CVE-2024-56738: Fixed side-channel attack due to not \n  constant-time algorithm in grub_crypto_memcmp (bsc#1234959)\n\nOther fixes:\n- Fix test -f and -s do not work properly over the network files \n  served via tftp and http (bsc#1246157, bsc#1246237)\n- Skip mount point in grub_find_device function (bsc#1246231)\n\n","status":"published","published":"2025-08-12T17:35:34Z","modified":"2026-02-04T02:31:37.575728Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:02813-1","title":"Recommended update for grub2","description":"This update for grub2 fixes the following issues:\n\n- CVE-2024-56738: Fixed side-channel attack due to not \n  constant-time algorithm in grub_crypto_memcmp (bsc#1234959)\n\nOther fixes:\n- Fix test -f and -s do not work properly over the network files \n  served via tftp and http (bsc#1246157, bsc#1246237)\n- Skip mount point in grub_find_device function (bsc#1246231)\n\n","status":"published","published":"2025-08-15T12:53:14Z","modified":"2026-03-23T04:47:52.710232Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:20654-1","title":"Security update for grub2","description":"This update for grub2 fixes the following issues:\n\n- CVE-2024-56738: Side-channel attack due to not constant-timealgorithm in grub_crypto_memcmp (bsc#1234959).\n","status":"published","published":"2025-09-05T12:57:04Z","modified":"2026-03-23T04:50:53.887379Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"SUSE-SU-2025:20863-1","title":"Security update for grub2","description":"This update for grub2 fixes the following issues:\n\n- Fix error: /boot/grub2/x86_64-efi/bli.mod not found (bsc#1231591)\n\n- Fix OOM error in loading loopback file (bsc#1230840) (bsc#1249140)\n\n- Update the patch to fix \"SRK not matched\" errors when unsealing\n  the key (bsc#1232411) (bsc#1247242)\n\nSecurity fixes for 2024:\n\n- Bump upstream SBAT generation to 5\n\n- CVE-2024-45774: Fixed heap overflows in JPEG parser (bsc#1233609)\n- CVE-2024-45775: Fixed missing NULL check in extcmd parser (bsc#1233610)\n- CVE-2024-45776: Fixed overflow in .MO file (gettext) handling (bsc#1233612)\n- CVE-2024-45777: Fixed integer overflow in gettext (bsc#1233613)\n- CVE-2024-45778: Fixed bfs filesystem not fuzzing stable (bsc#1233606)\n- CVE-2024-45779: Fixed bfs heap overflow (bsc#1233608)\n- CVE-2024-45780: Fixed overflow in tar/cpio (bsc#1233614)\n- CVE-2024-45781: Fixed ufs strcpy overflow(bsc#1233617)\n- CVE-2024-45782: Fixed hfs strcpy overflow (bsc#1233615)\n- CVE-2024-45783: Fixed hfsplus refcount overflow (bsc#1233616)\n- CVE-2024-49504: Fixed bypassing TPM-bound disk encryption on SL(E)M\n  encrypted Images (bsc#1229163) (bsc#1229164)\n- CVE-2024-56737: Fixed heap-based buffer overflow in fs/hfs.c via\n  crafted sblock data in an HFS filesystem (bsc#1234958)\n- CVE-2024-56738: Fixed side-channel attack due to not constant-time\n  algorithm in grub_crypto_memcmp (bsc#1234959)\n- CVE-2025-0622: Fixed command/gpg use-after-free due to hooks not being\n  removed on module unload (bsc#1236317)\n- CVE-2025-0624: Fixed net Out-of-bounds write in grub_net_search_config_file() (bsc#1236316)\n- CVE-2025-0677: Fixed UFS integer overflow may lead to heap based\n  out-of-bounds write when handling symlinks (bsc#1237002)\n- CVE-2025-0678: Fixed squash4 Integer overflow may lead to heap based\n  out-of-bounds write when reading data (bsc#1237006)\n- CVE-2025-0684: Fixed reiserfs Integer overflow when handling symlinks\n  may lead to heap based out-of-bounds write when reading data (bsc#1237008)\n- CVE-2025-0685: Fixed jfs Integer overflow when handling symlinks may\n  lead to heap based out-of-bounds write when reading data (bsc#1237009)\n- CVE-2025-0686: Fixed romfs Integer overflow when handling symlinks\n  may lead to heap based out-of-bounds write when reading data (bsc#1237010)\n- CVE-2025-0689: Fixed udf heap based buffer overflow  in\n  grub_udf_read_block() may lead to arbitrary code execution (bsc#1237011)\n- CVE-2025-0690: Fixed \"read\" integer overflow may lead to out-of-bounds write (bsc#1237012)\n- CVE-2025-1118: Fixed commands/dump The dump command is not in lockdown when secure boot is enabled (bsc#1237013)\n- CVE-2025-1125: Fixed fs/hfs interger overflow may lead to heap based out-of-bounds write (bsc#1237014)\n- CVE-2025-4382: Fixed TPM auto-decryption data exposure (bsc#1242971)\n- Restrict CLI access if the encrypted root device is automatically unlocked by\n  the TPM. LUKS password authentication is required for access to be granted\n","status":"published","published":"2025-10-17T12:04:21Z","modified":"2026-03-23T04:51:03.18499Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"SUSE-SU-2025:21212-1","title":"Security update for grub2","description":"This update for grub2 fixes the following issues:\n\nChanges in grub2:\n\n- CVE-2025-54771: Fixed grub_file_close() does not properly controls the fs refcount (bsc#1252931)\n- CVE-2025-54770: Fixed missing unregister call for net_set_vlan command may lead to use-after-free  (bsc#1252930)\n- CVE-2025-61662: Fixed missing unregister call for gettext command may lead to use-after-free (bsc#1252933)\n- CVE-2025-61663: Fixed missing unregister call for normal commands may lead to use-after-free (bsc#1252934)\n- CVE-2025-61664: Fixed missing unregister call for normal_exit command may lead to use-after-free (bsc#1252935)\n- CVE-2025-61661: Fixed out-of-bounds write in grub_usb_get_string() function (bsc#1252932)\n\n- Bump upstream SBAT generation to 6\n\n- Fix \"sparse file not allowed\" error after grub2-reboot (bsc#1245738)\n- Fix PowerPC network boot prefix to correctly locate grub.cfg (bsc#1249385)\n- turn off page flipping for i386-pc using VBE video backend (bsc#1245636)\n- Fix boot hangs in setting up serial console when ACPI SPCR table is present\n  and redirection is disabled (bsc#1249088)\n- Fix timeout when loading initrd via http after PPC CAS reboot (bsc#1245953)\n- Skip mount point in grub_find_device function (bsc#1246231)\n\n- CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grub_crypto_memcmp (bsc#1234959)\n","status":"published","published":"2025-12-15T12:49:56Z","modified":"2026-03-23T04:51:16.297112Z","updated_at":"2026-11-02T15:54:00.344164Z"},{"id":"SUSE-SU-2025:21223-1","title":"Security update for grub2","description":"This update for grub2 fixes the following issues:\n\nChanges in grub2:\n\n- CVE-2025-54771: Fixed grub_file_close() does not properly controls the fs refcount (bsc#1252931)\n- CVE-2025-54770: Fixed missing unregister call for net_set_vlan command may lead to use-after-free  (bsc#1252930)\n- CVE-2025-61662: Fixed missing unregister call for gettext command may lead to use-after-free (bsc#1252933)\n- CVE-2025-61663: Fixed missing unregister call for normal commands may lead to use-after-free (bsc#1252934)\n- CVE-2025-61664: Fixed missing unregister call for normal_exit command may lead to use-after-free (bsc#1252935)\n- CVE-2025-61661: Fixed out-of-bounds write in grub_usb_get_string() function (bsc#1252932)\n\n- Bump upstream SBAT generation to 6\n\n- Fix \"sparse file not allowed\" error after grub2-reboot (bsc#1245738)\n- Fix PowerPC network boot prefix to correctly locate grub.cfg (bsc#1249385)\n- turn off page flipping for i386-pc using VBE video backend (bsc#1245636)\n- Fix boot hangs in setting up serial console when ACPI SPCR table is present\n  and redirection is disabled (bsc#1249088)\n- Fix timeout when loading initrd via http after PPC CAS reboot (bsc#1245953)\n- Skip mount point in grub_find_device function (bsc#1246231)\n\n- CVE-2024-56738: Fixed side-channel attack due to not constant-time algorithm in grub_crypto_memcmp (bsc#1234959)\n","status":"published","published":"2025-12-15T12:49:56Z","modified":"2026-03-23T04:49:18.434555Z","updated_at":"2026-11-02T15:54:00.344164Z"}]}}