PT-2026-7909 · Unknown · Grub-Btrfs

Cardosource · Publicado 2026-02-12 · Atualizado 2026-03-04 · CVE-2026-25828

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions grub-btrfs versions through 2026-01-31

Description The software does not properly sanitize the root parameter when resolving devices, leading to potential command injection within the initramfs environment. This could allow for unauthorized execution of operating system commands.

Recommendations Update grub-btrfs to a version newer than 2026-01-31.

Exploit

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2026-25828

Produtos afetados

Grub-Btrfs

Referências · 6

• 🔥 https://github.com/cardosource/CVE-2026-25828 · Exploit
• https://github.com/Antynea/grub-btrfs/tree/master · Nota
• https://archlinux.org/packages/extra/any/grub-btrfs · Nota
• https://twitter.com/CVEnew/status/2022069308495421865 · Publicação no Twitter
• https://t.me/cveNotify/154083 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-25828 · Nota de Segurança