4.9
Medium
CVE-2025-54771 Grub2: use-after-free in grub_file_close()
Description
A use-after-free vulnerability has been identified in the GNU GRUB (Grand Unified Bootloader). The flaw occurs because the file-closing process incorrectly retains a memory pointer, leaving an invalid reference to a file system structure. An attacker could exploit this vulnerability to cause grub to crash, leading to a Denial of Service. Possible data integrity or confidentiality compromise is not discarded.
CVSS 3.1 detail
Vector CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:LExploitable with local access to the machine, without an account and without any user action; the impact on data or service is limited.
- Attack vector
- Local
- Attack complexity
- High
- Privileges required
- None
- Interaction
- None
- Scope
- Unchanged
- Confidentiality
- Low
- Integrity
- Low
- Availability
- Low
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| GRUB2 2.14 | earliest → 2.14 | No fix stated |
| Red Hat Enterprise Linux 10 | Versions not published | |
| Red Hat Enterprise Linux 7 | Versions not published | |
| Red Hat Enterprise Linux 8 | Versions not published | |
| Red Hat Enterprise Linux 9 | Versions not published | |
| Red Hat OpenShift Container Platform 4 | Versions not published | |
| Red Hat In-Vehicle Operating System 1 | Versions not published |
References
- access.redhat.com access.redhat.com
- RHBZ#2413823 bugzilla.redhat.com
- lists.gnu.org lists.gnu.org
Timeline
- Published
- Last modified
Other CVEs of GRUB2
The 10 CVEs of GRUB2 →
CVE-2026-97876
A local attacker with control over GRUB's configuration can bypass lockdown restrictions when booting with Secure Boot…
6.4
Medium
CVE-2025-54770
Grub2: use-after-free in net_set_vlan
4.9
Medium
CVE-2025-61664
Grub2: missing unregister call for normal_exit command may lead to use-after-free
4.9
Medium
CVE-2025-61663
Grub2: missing unregister call for normal commands may lead to use-after-free
4.9
Medium