PT-2025-47382 · Grub2+3 · Grub2+3
Published
2025-11-18
·
Updated
2026-05-19
·
CVE-2025-61664
CVSS v3.1
4.9
Medium
| Vector | AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
GRUB2 (affected versions not specified)
Description
A memory Use After Free issue exists in the GRUB2 bootloader's normal module. The problem arises because the
normal exit command is not correctly unregistered when its associated module is unloaded. An attacker can trigger this by calling the command after the module has been removed, resulting in improper access to freed memory. This can cause a system crash and potentially compromise data confidentiality and integrity.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Grub2
Red Os
Suse