Red Hat Enterprise Linux 9/grub2

Red Hat · Package

9 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
grub2: Observable Timing Discrepancy resulting side-channel attacksCVE-2024-56738	Red Hat Enterprise Linux 10/grub2 Red Hat Enterprise Linux 7/grub2	Red Hat	Medium	No fix reported	Not recorded
grub2: commands/dump: The dump command is not in lockdown when secure boot is enabledCVE-2025-1118	Red Hat Enterprise Linux 7/grub2 Red Hat Enterprise Linux 8/grub2	Red Hat	Medium	No fix reported	Not recorded
grub2: grub allow access to encrypted device through CLI once root device is unlocked via TPMCVE-2025-4382	Red Hat Enterprise Linux 10/grub2 Red Hat Enterprise Linux 7/grub2	Red Hat	Medium	No fix reported	Not recorded
grub2: Missing unregister call for normal_exit command may lead to use-after-freeCVE-2025-61664	Red Hat Enterprise Linux 10/grub2 Red Hat Enterprise Linux 7/grub2	Red Hat	Medium	No fix reported	Not recorded
grub2: Missing unregister call for normal commands may lead to use-after-freeCVE-2025-61663	Red Hat Enterprise Linux 10/grub2 Red Hat Enterprise Linux 7/grub2	Red Hat	Medium	No fix reported	Not recorded
grub2: grub2: Out-of-bounds write via malicious USB deviceCVE-2025-61661	Red Hat Enterprise Linux 10/grub2 Red Hat Enterprise Linux 7/grub2	Red Hat	Medium	No fix reported	Not recorded
grub2: Use-after-free in grub_file_close()CVE-2025-54771	Red Hat Enterprise Linux 10/grub2 Red Hat Enterprise Linux 7/grub2	Red Hat	Medium	No fix reported	Not recorded
grub2: Use-after-free in net_set_vlanCVE-2025-54770	Red Hat Enterprise Linux 10/grub2 Red Hat Enterprise Linux 7/grub2	Red Hat	Medium	No fix reported	Not recorded
grub2: grub2: Secure Boot lockdown bypass via improper serial address validationCVE-2026-97876	Red Hat Enterprise Linux 10/grub2 Red Hat Enterprise Linux 7/grub2	Red Hat	Medium	No fix reported	Not recorded