CVE-2024-49504 grub2 allowed attackers with access to the grub shell to access files on the encrypted disks

Description

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks.

Affected products and versions

Product	Affected versions	Fixed in
openSUSE Tumbleweed 2.12	earliest → < 2.12-28.1	2.12-28.1
opensuse_tumbleweed 2.12	earliest → < 2.12-28.1	2.12-28.1

Other CVEs of openSUSE Tumbleweed

The 13 CVEs of openSUSE Tumbleweed →

CVE-2026-44950 fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) copies each glyph's bitmap into a single buffer 9.0 Critical CVE-2026-59679 fs_read_glyphs() in the libXfont2 font-server client (src/fc/fserve.c) indexes the per-character encoding[] array… 9.0 Critical CVE-2026-59674 A UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tumbleweed suricata package allows the suricata… 7.1 High CVE-2026-41051 csync2 uses insecure temporary directories when compiled with C99 or later, allowing for TOCTOU style attacks on the… 5.1 Medium