Skip to content
OpenAdvisories

Product · GNU Project

GNU GRUB

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2022-28736

    There's a use-after-free vulnerability in grub_cmd_chainloader() function

    There's a use-after-free vulnerability in grub_cmd_chainloader() function; The chainloader command is used to boot up operating systems that doesn't support multiboot and do not have direct support from GRUB2. When executing chainloader more than once a use-a…

    GNU Project GNU GRUB grub2 grub2-signed Debian Ubuntu
  • Medium 6.7
    CVE-2022-28735

    The GRUB2's shim_lock verifier allows non-kernel files to be loaded on shim-powered secure boot systems. Allowing such …

    GNU Project GNU GRUB grub2 grub2-signed Debian Ubuntu