Description
A Insecure Temporary File vulnerability in grub-once of grub2 in SUSE Linux Enterprise Server 15 SP4, openSUSE Factory allows local attackers to truncate arbitrary files. This issue affects: SUSE Linux Enterprise Server 15 SP4 grub2 versions prior to 2.06-150400.7.1. SUSE openSUSE Factory grub2 versions prior to 2.06-18.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SUSE | SUSE Linux Enterprise Server 15 SP4 | grub2 – < 2.06-150400.7.1 | 2.06-150400.7.1 |
| SUSE | openSUSE Factory | grub2 – < 2.06-18.1 | 2.06-18.1 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | grub2 | 2.06-18.1 | openSUSE-SU-2024:11926-1 |
Advisories 1
- openSUSE-SU-2024:11926-1 grub2-2.06-18.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026