Skip to content
OpenAdvisories
High RHSA-2022:8900 1 CVE

Red Hat Security Advisory: grub2 security update

Published Sep 16, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 63

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client grub2 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::client grub2-common 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::client grub2-debuginfo 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::client grub2-efi-aa64-modules 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::client grub2-efi-ia32 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::client grub2-efi-ia32-cdboot 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::client grub2-efi-ia32-modules 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::client grub2-efi-x64 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::client grub2-efi-x64-cdboot 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::client grub2-efi-x64-modules 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::client grub2-pc 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::client grub2-pc-modules 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::client grub2-ppc-modules 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::client grub2-ppc64-modules 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::client grub2-ppc64le-modules 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::client grub2-tools 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::client grub2-tools-extra 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::client grub2-tools-minimal 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::computenode grub2-debuginfo 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::computenode grub2-efi-aa64-modules 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::computenode grub2-efi-ia32-cdboot 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::computenode grub2-efi-x64-cdboot 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::computenode grub2-ppc-modules 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::computenode grub2-ppc64-modules 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::computenode grub2-ppc64le-modules 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::server grub2 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::server grub2-common 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::server grub2-debuginfo 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::server grub2-efi-aa64-modules 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::server grub2-efi-ia32 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::server grub2-efi-ia32-cdboot 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::server grub2-efi-ia32-modules 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::server grub2-efi-x64 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::server grub2-efi-x64-cdboot 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::server grub2-efi-x64-modules 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::server grub2-pc 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::server grub2-pc-modules 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::server grub2-ppc-modules 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::server grub2-ppc64 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::server grub2-ppc64-modules 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::server grub2-ppc64le 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::server grub2-ppc64le-modules 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::server grub2-tools 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::server grub2-tools-extra 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::server grub2-tools-minimal 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::workstation grub2 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::workstation grub2-common 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::workstation grub2-debuginfo 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::workstation grub2-efi-aa64-modules 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::workstation grub2-efi-ia32 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::workstation grub2-efi-ia32-cdboot 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::workstation grub2-efi-ia32-modules 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::workstation grub2-efi-x64 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::workstation grub2-efi-x64-cdboot 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::workstation grub2-efi-x64-modules 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::workstation grub2-pc 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::workstation grub2-pc-modules 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::workstation grub2-ppc-modules 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::workstation grub2-ppc64-modules 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::workstation grub2-ppc64le-modules 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::workstation grub2-tools 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::workstation grub2-tools-extra 1:2.02-0.87.el7_9.11
Red Hat · RHEL 7 enterprise_linux:7::workstation grub2-tools-minimal 1:2.02-0.87.el7_9.11

Vulnerabilities 1

  • High 8.1
    CVE-2022-28733

    Integer underflow in grub_net_recv_ip4_packets

    Integer underflow in grub_net_recv_ip4_packets; A malicious crafted IP packet can lead to an integer underflow in grub_net_recv_ip4_packets() function on rsm->total_len value. Under certain circumstances the total_len value may end up wrapping around to a sma…

    GNU GNU GRUB grub2 grub2-signed Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2083339
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8900.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-28733
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-28733
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-28733