Description
An attacker with local access to a system (either through a disk or external drive) can present a modified XFS partition to grub-legacy in such a way to exploit a memory corruption in grub’s XFS file system implementation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Free Software Foundation | Grub-Legacy | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 13 | grub | No fix yet | — |
| Debian 12 | grub | No fix yet | — |