Gnu Grub vulnerabilities

• gnu grub2 Bypass of GRUB lockdown restriction in Secure Boot mode via serial command MMIO base address CVE-2026-97876 Fix available 6.4 MediumOctober 2, 2026
• gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 more Grub2: use-after-free in net_set_vlan CVE-2025-54770 Fix available 4.9 MediumNovember 18, 2025
• gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 more Grub2: missing unregister call for normal_exit command may lead to use-after-free CVE-2025-61664 Fix available 4.9 MediumNovember 18, 2025
• gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 more Grub2: missing unregister call for normal commands may lead to use-after-free CVE-2025-61663 Fix available 4.9 MediumNovember 18, 2025
• gnu grub2, red hat enterprise linux 10, enterprise linux 10.0 extended update support +23 more +25 more Grub2: missing unregister call for gettext command may lead to use-after-free CVE-2025-61662 Fix available 7.8 HighNovember 18, 2025
• gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 more Grub2: grub2: out-of-bounds write via malicious usb device CVE-2025-61661 Fix available 4.8 MediumNovember 18, 2025
• gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 more Grub2: use-after-free in grub_file_close() CVE-2025-54771 Fix available 4.9 MediumNovember 18, 2025
• gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 more Grub2: fs/hfs: integer overflow may lead to heap based out-of-bounds write CVE-2025-1125 Fix available 7.8 HighFebruary 18, 2025
• gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 more Grub2: udf: heap based buffer overflow in grub_udf_read_block() may lead to arbitrary code execution CVE-2025-0689 Fix available 7.8 HighFebruary 18, 2025
• gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 more Grub2: romfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading dat CVE-2025-0686 Fix available 6.4 MediumFebruary 18, 2025
• gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 more Grub2: jfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data CVE-2025-0685 Fix available 6.4 MediumFebruary 18, 2025
• gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 more Grub2: reiserfs: integer overflow when handling symlinks may lead to heap based out-of-bounds write when reading data CVE-2025-0684 Fix available 6.4 MediumFebruary 18, 2025
• gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 more Grub2: squash4: integer overflow may lead to heap based out-of-bounds write when reading data CVE-2025-0678 Fix available 7.8 HighFebruary 18, 2025
• gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 more Grub2: fs/hfs: strcpy() using the volume name (fs/hfs.c:382) CVE-2024-45782 Fix available 7.8 HighFebruary 18, 2025
• gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 more Grub2: fs/tar: integer overflow causes heap oob write CVE-2024-45780 Fix available 6.7 MediumFebruary 18, 2025
• gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 more Grub2: fs/bfs: integer overflow leads to heap oob read in the bfs parser CVE-2024-45779 Fix available 6.0 MediumFebruary 18, 2025
• gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 more Grub2: fs/bfs: integer overflow in the bfs parser. CVE-2024-45778 Fix available 4.1 MediumFebruary 18, 2025
• gnu grub2, red hat enterprise linux 10, enterprise linux 7 +5 more +7 more Grub2: grub-core/gettext: integer overflow leads to heap oob write. CVE-2024-45777 Fix available 6.7 MediumFebruary 18, 2025
• gnu grub2 GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp... CVE-2024-56738 Fix available 5.3 MediumDecember 29, 2024
• gnu grub2 GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock... CVE-2024-56737 Fix available 8.8 HighDecember 29, 2024
• gnu grub2, debian based gnu grub, netapp bootstrap os +2 more GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2... CVE-2024-2312 Fix available 6.7 MediumApril 5, 2024
• gnu grub2, fedoraproject fedora, red hat enterprise linux 6 +4 more +6 more Grub2: grub2-set-bootflag can be abused by local (pseudo-)users CVE-2024-1048 Fix available 3.3 LowFebruary 6, 2024
• gnu grub2, fedoraproject fedora, red hat enterprise linux 8 +4 more +6 more Grub2: bypass the grub password protection feature CVE-2023-4001 Fix available 6.8 MediumJanuary 11, 2024
• free software foundation grub-legacy, gnu grub, xen +2 more Memory Corruption Vulnerability in Grub-Legacy's XFS Implementation CVE-2023-4949 8.1 HighNovember 10, 2023
• gnu grub2, red hat enterprise linux 7, enterprise linux 8 +2 more +4 more Grub2: out-of-bounds read at fs/ntfs.c CVE-2023-4693 Fix available 5.3 MediumOctober 3, 2023
• gnu grub2, red hat enterprise linux 7, enterprise linux 8 +2 more +4 more Grub2: out-of-bounds write at fs/ntfs.c may lead to unsigned code execution CVE-2023-4692 Fix available 7.5 HighOctober 3, 2023
• gnu grub2, redhat enterprise linux +1 more When rendering certain unicode sequences, grub2's font code doesn't proper validate if the... CVE-2022-3775 Fix available 7.1 HighNovember 15, 2022
• fedoraproject fedora, gnu grub2, redhat enterprise linux eus +5 more +7 more A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead... CVE-2022-2601 Fix available 8.6 HighNovember 15, 2022
• gnu grub2, gnu project grub +1 more There's a use-after-free vulnerability in grub_cmd_chainloader() function CVE-2022-28736 Fix available 6.4 MediumJune 10, 2022
• gnu grub2, gnu project grub +1 more The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot... CVE-2022-28735 Fix available 6.7 MediumJune 10, 2022
• gnu grub2, gnu project grub, netapp active iq unified manager +2 more Out-of-bounds write when handling split HTTP headers CVE-2022-28734 Fix available 8.1 HighJune 10, 2022
• gnu project grub, gnu grub2 +1 more Integer underflow in grub_net_recv_ip4_packets CVE-2022-28733 Fix available 8.1 HighJune 10, 2022
• gnu grub2, redhat codeready linux builder, developer tools +9 more +11 more A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user... CVE-2021-3697 Fix available 7.0 HighJune 10, 2022
• gnu grub2, netapp ontap select deploy administration utility, redhat codeready linux builder +10 more +12 more A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader.... CVE-2021-3696 Fix available 4.5 MediumJune 10, 2022
• gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +11 more +13 more A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An... CVE-2021-3695 Fix available 4.5 MediumJune 10, 2022
• gnu grub2, suse opensuse factory, linux enterprise server 15 sp4 +2 more grub2-once uses fixed file name in /var/tmp CVE-2021-46705 Fix available 5.1 MediumMarch 16, 2022
• gnu grub2, fedoraproject fedora +1 more A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with... CVE-2021-3981 Fix available 3.3 LowMarch 8, 2022
• gnu grub2 If certificates that signed grub are installed into db, grub can be booted directly. It will then... CVE-2021-3418 Fix available 6.4 MediumMarch 15, 2021
• gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 more A flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code... CVE-2021-20233 Public exploitFix available 8.2 HighMarch 2, 2021
• gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 more A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to... CVE-2021-20225 Fix available 6.7 MediumMarch 2, 2021
• gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 more A flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure... CVE-2020-27779 Fix available 7.5 HighMarch 2, 2021
• gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 more A flaw was found in grub2 in versions prior to 2.06. Variable names present are expanded in the... CVE-2020-27749 Fix available 6.7 MediumMarch 2, 2021
• gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 more A flaw was found in grub2 in versions prior to 2.06. During USB device initialization,... CVE-2020-25647 Fix available 7.6 HighMarch 2, 2021
• gnu grub2, fedoraproject fedora, netapp ontap select deploy administration utility +5 more +7 more A flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the... CVE-2020-25632 Public exploitFix available 8.2 HighMarch 2, 2021
• gnu grub2, fedoraproject fedora, netapp cloud backup +6 more +8 more A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of... CVE-2020-14372 Public exploitFix available 7.5 HighMarch 2, 2021
• gnu grub2, canonical ubuntu linux, debian linux +12 more +14 more GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim CVE-2020-15705 Fix available 6.4 MediumJuly 29, 2020
• debian linux, gnu grub2, canonical ubuntu linux +13 more +15 more GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow. CVE-2020-15707 Fix available 5.7 MediumJuly 29, 2020
• gnu grub2, canonical ubuntu linux, debian linux +12 more +14 more GRUB2 contains a race condition leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executing. CVE-2020-15706 Fix available 6.4 MediumJuly 29, 2020
• gnu grub2, canonical ubuntu linux, opensuse leap +4 more +6 more There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A... CVE-2020-14311 Fix available 5.7 MediumJuly 29, 2020
• gnu grub2, canonical ubuntu linux, opensuse leap +4 more +6 more There is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a... CVE-2020-14310 Fix available 5.7 MediumJuly 29, 2020
• Show olderLoading…