Grub: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 6

• High 7.8
  CVE-2025-61662

  Grub2: missing unregister call for gettext command may lead to use-after-free

  A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a programming error where the gettext command remains registered in memory after its module is unloaded. An attacker can exploit this condition by invoking the o…

  Red Hat GNU Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux
  Nov 18, 2025
• Medium 4.9
  CVE-2025-54770

  Grub2: use-after-free in net_set_vlan

  A vulnerability has been identified in the GRUB2 bootloader's network module that poses an immediate Denial of Service (DoS) risk. This flaw is a Use-after-Free issue, caused because the net_set_vlan command is not properly unregistered when the network modul…

  Red Hat GNU Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu
  Nov 18, 2025
• Medium 4.9
  CVE-2025-54771

  Grub2: use-after-free in grub_file_close()

  A use-after-free vulnerability has been identified in the GNU GRUB (Grand Unified Bootloader). The flaw occurs because the file-closing process incorrectly retains a memory pointer, leaving an invalid reference to a file system structure. An attacker could ex…

  Red Hat GNU Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu
  Nov 18, 2025
• Medium 4.9
  CVE-2025-61663

  Grub2: missing unregister call for normal commands may lead to use-after-free

  A vulnerability has been identified in the GRUB2 bootloader's normal command that poses an immediate Denial of Service (DoS) risk. This flaw is a Use-after-Free issue, caused because the normal command is not properly unregistered when the module is unloaded.…

  Red Hat GNU Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux
  Nov 18, 2025
• Medium 4.9
  CVE-2025-61664

  Grub2: missing unregister call for normal_exit command may lead to use-after-free

  A vulnerability in the GRUB2 bootloader has been identified in the normal module. This flaw, a memory Use After Free issue, occurs because the normal_exit command is not properly unregistered when its related module is unloaded. An attacker can exploit this c…

  Red Hat GNU Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux
  Nov 18, 2025
• Medium 4.8
  CVE-2025-61661

  Grub2: grub2: out-of-bounds write via malicious usb device

  A vulnerability has been identified in the GRUB (Grand Unified Bootloader) component. This flaw occurs because the bootloader mishandles string conversion when reading information from a USB device, allowing an attacker to exploit inconsistent length values. …

  Red Hat GNU Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux
  Nov 18, 2025

Revision history

1. 2026-09-15 #27

   Neue Updates von IBM aufgenommen

2. 2026-09-03 #26

   Neue Updates von Dell aufgenommen

3. 2026-06-11 #25

   Neue Updates von IBM aufgenommen

4. 2026-05-21 #24

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

5. 2026-05-20 #23

   Neue Updates von Red Hat aufgenommen

6. 2026-05-17 #22

   Neue Updates von SUSE aufgenommen

7. 2026-05-14 #21

   Neue Updates von Red Hat aufgenommen

8. 2026-05-03 #20

   Neue Updates von Red Hat aufgenommen

9. 2026-04-23 #19

   Neue Updates von IBM aufgenommen

10. 2026-04-15 #18

    Neue Updates von Red Hat aufgenommen

11. 2026-04-08 #17

    Neue Updates von Red Hat aufgenommen

12. 2026-04-07 #16

    Neue Updates von Oracle Linux aufgenommen

13. 2026-03-24 #15

    Neue Updates von Red Hat aufgenommen

14. 2026-03-22 #14

    Neue Updates von Red Hat aufgenommen

15. 2026-03-18 #13

    Neue Updates von Oracle Linux und Red Hat aufgenommen

16. 2026-03-17 #12

    Neue Updates von Red Hat und Oracle Linux aufgenommen

17. 2026-03-16 #11

    Neue Updates von Red Hat aufgenommen

18. 2026-01-05 #10

    Neue Updates von Amazon aufgenommen

19. 2025-12-18 #9

    Neue Updates von SUSE aufgenommen

20. 2025-12-17 #8

    Neue Updates von openSUSE aufgenommen

21. 2025-11-30 #7

    Neue Updates von SUSE aufgenommen

22. 2025-11-27 #6

    Neue Updates von SUSE aufgenommen

23. 2025-11-25 #5

    Neue Updates von SUSE aufgenommen

24. 2025-11-24 #4

    Neue Updates von SUSE aufgenommen

25. 2025-11-23 #3

    Neue Updates von SUSE und openSUSE aufgenommen

References

• OSS Security Mailing List vom 2025-11-18
  https://seclists.org/oss-sec/2025/q4/191
• SUSE Security Update SUSE-SU-2025:4143-1 vom 2025-11-20
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KDODU4W7BGW2ULT35JBOJLS5BJO2M3DX/
• SUSE Security Update SUSE-SU-2025:4152-1 vom 2025-11-21
  https://lists.suse.com/pipermail/sle-security-updates/2025-November/023310.html
• openSUSE Security Update OPENSUSE-SU-2025:15749-1 vom 2025-11-22
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QNOLPRRIM6HJ6IRJ4AWWG56GX4IBAAJK/
• SUSE Security Update SUSE-SU-2025:4196-1 vom 2025-11-24
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Y52BW7QY7H7DNOJGMPQAKTXUBOA4537U/
• SUSE Security Update SUSE-SU-2025:4197-1 vom 2025-11-24
  https://lists.suse.com/pipermail/sle-security-updates/2025-November/023335.html
• SUSE Security Update SUSE-SU-2025:4196-1 vom 2025-11-24
  https://lists.suse.com/pipermail/sle-security-updates/2025-November/023336.html
• SUSE Security Update SUSE-SU-2025:4224-1 vom 2025-11-25
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/H7QV6KRJVIOQ5HAKGN4YBUZLHY2JC2Y6/
• SUSE Security Update SUSE-SU-2025:21062-1 vom 2025-11-27
  https://lists.suse.com/pipermail/sle-security-updates/2025-November/023417.html
• SUSE Security Update SUSE-SU-2025:4305-1 vom 2025-11-28
  https://lists.suse.com/pipermail/sle-security-updates/2025-November/023439.html
• openSUSE Security Update OPENSUSE-SU-2025:20163-1 vom 2025-12-17
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/K2523KE5PWRISM344FWJVBE6KCPRRPYS/
• SUSE Security Update SUSE-SU-2025:21223-1 vom 2025-12-18
  https://lists.suse.com/pipermail/sle-security-updates/2025-December/023588.html
• SUSE Security Update SUSE-SU-2025:21212-1 vom 2025-12-18
  https://lists.suse.com/pipermail/sle-security-updates/2025-December/023596.html
• Amazon Linux Security Advisory ALAS2-2025-3107 vom 2026-01-05
  https://alas.aws.amazon.com/AL2/ALAS2-2025-3107.html
• Red Hat Security Advisory RHSA-2026:4653 vom 2026-03-17
  https://access.redhat.com/errata/RHSA-2026:4653
• Red Hat Security Advisory RHSA-2026:4652 vom 2026-03-17
  https://access.redhat.com/errata/RHSA-2026:4652
• Red Hat Security Advisory RHSA-2026:4649 vom 2026-03-17
  https://access.redhat.com/errata/RHSA-2026:4649
• Red Hat Security Advisory RHSA-2026:4648 vom 2026-03-16
  https://access.redhat.com/errata/RHSA-2026:4648
• Red Hat Security Advisory RHSA-2026:4654 vom 2026-03-17
  https://access.redhat.com/errata/RHSA-2026:4654
• Red Hat Security Advisory RHSA-2026:4822 vom 2026-03-17
  https://access.redhat.com/errata/RHSA-2026:4822
• Red Hat Security Advisory RHSA-2026:4830 vom 2026-03-17
  https://access.redhat.com/errata/RHSA-2026:4830
• Red Hat Security Advisory RHSA-2026:4760 vom 2026-03-17
  https://access.redhat.com/errata/RHSA-2026:4760
• Oracle Linux Security Advisory ELSA-2026-4649 vom 2026-03-17
  https://linux.oracle.com/errata/ELSA-2026-4649.html
• Red Hat Security Advisory RHSA-2026:4823 vom 2026-03-17
  https://access.redhat.com/errata/RHSA-2026:4823
• Red Hat Security Advisory RHSA-2026:4900 vom 2026-03-18
  https://access.redhat.com/errata/RHSA-2026:4900
• Oracle Linux Security Advisory ELSA-2026-4648 vom 2026-03-18
  https://linux.oracle.com/errata/ELSA-2026-4648.html
• Oracle Linux Security Advisory ELSA-2026-4760 vom 2026-03-18
  https://linux.oracle.com/errata/ELSA-2026-4760.html
• Red Hat Security Advisory RHSA-2026:4998 vom 2026-03-19
  https://access.redhat.com/errata/RHSA-2026:4998
• Red Hat Security Advisory RHSA-2026:5074 vom 2026-03-19
  https://access.redhat.com/errata/RHSA-2026:5074
• Red Hat Security Advisory RHSA-2026:5233 vom 2026-03-23
  https://access.redhat.com/errata/RHSA-2026:5233
• Red Hat Security Advisory RHSA-2026:5127 vom 2026-03-25
  https://access.redhat.com/errata/RHSA-2026:5127
• Oracle Linux Security Advisory ELSA-2026-5233 vom 2026-04-07
  https://linux.oracle.com/errata/ELSA-2026-5233.html
• Red Hat Security Advisory RHSA-2026:6492 vom 2026-04-09
  https://access.redhat.com/errata/RHSA-2026:6492
• Red Hat Security Advisory RHSA-2026:7239 vom 2026-04-16
  https://access.redhat.com/errata/RHSA-2026:7239
• Red Hat Security Advisory RHSA-2026:7243 vom 2026-04-16
  https://access.redhat.com/errata/RHSA-2026:7243
• IBM Security Bulletin 7270594 vom 2026-04-23
  https://www.ibm.com/support/pages/node/7270594
• Red Hat Security Advisory RHSA-2026:10097 vom 2026-04-30
  https://access.redhat.com/errata/RHSA-2026:10097
• Red Hat Security Advisory vom 2026-05-13
  https://access.redhat.com/errata/RHSA-2026:14773
• Red Hat Security Advisory RHSA-2026:15087 vom 2026-05-13
  https://access.redhat.com/errata/RHSA-2026:15087
• SUSE Security Update SUSE-SU-2026:21621-1 vom 2026-05-15
  https://lists.suse.com/pipermail/sle-security-updates/2026-May/026071.html
• Red Hat Security Advisory RHSA-2026:17596 vom 2026-05-20
  https://access.redhat.com/errata/RHSA-2026:17596
• Rocky Linux Security Advisory RLSA-2026:4760 vom 2026-05-21
  https://errata.build.resf.org/RLSA-2026:4760
• Rocky Linux Security Advisory RLSA-2026:4649 vom 2026-05-21
  https://errata.build.resf.org/RLSA-2026:4649
• IBM Security Bulletin 7275956 vom 2026-06-11
  https://www.ibm.com/support/pages/node/7275956
• Dell Security Advisory DSA-2026-313 vom 2026-09-04
  https://www.dell.com/support/kbdoc/de-de/000505510/dsa-2026-313-security-update-for-dell-avamar-dell-networker-virtual-edition-nve-and-dell-powerprotect-dp-series-appliance-dell-integrated-data-protection-appliance-idpa-multiple-third-party-vulnerabilities
• IBM Security Bulletin 7287348 vom 2026-09-15
  https://www.ibm.com/support/pages/node/7287348