PT-2025-6796 · Grub2+8 · Grub2+8

Published 2025-02-18 · Updated 2025-10-17 · CVE-2025-0622

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Grub2 (affected versions not specified)

Description A flaw was found in command/gpg, where hooks created by loaded modules are not removed when the related module is unloaded. This allows an attacker to force Grub2 to call the hooks once the module that registered it was unloaded, leading to a use-after-free vulnerability. If correctly exploited, this vulnerability may result in arbitrary code execution, eventually allowing the attacker to bypass secure boot protections.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use After Free

Double Free

Weakness Enumeration

CWE-416

CWE-415

Related Identifiers

ALSA-2025:16154

ALSA-2025:6990

ALT-PU-2025-5587

ALT-PU-2025-6088

BDU:2025-11750

CVE-2025-0622

INFSA-2025_6990

OESA-2025-1216

OESA-2025-1217

OESA-2025-1218

OESA-2025-1232

OESA-2025-1233

OPENSUSE-SU-2025:14822-1

OPENSUSE-SU-2025_0586-1

OPENSUSE-SU-2025_0587-1

OPENSUSE-SU-2025_0588-1

OPENSUSE-SU-2025_0607-1

RHSA-2025:16154

RHSA-2025:6990

RHSA-2025_6990

SUSE-SU-2025:01961-1

SUSE-SU-2025:0586-1

SUSE-SU-2025:0587-1

SUSE-SU-2025:0588-1

SUSE-SU-2025:0607-1

SUSE-SU-2025:0629-1

SUSE-SU-2025:20511-1

SUSE-SU-2025:20863-1

SUSE-SU-2025_0586-1

SUSE-SU-2025_0587-1

SUSE-SU-2025_0588-1

SUSE-SU-2025_0607-1

SUSE-SU-2025_0629-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Debian

Grub2

Red Hat

Red Os

Rocky Linux

Suse

References · 160

• https://osv.dev/vulnerability/OESA-2025-1232 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:0588-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-45781 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-0677 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-45782 · Security Note
• https://wiki.astralinux.ru/astra-linux-se38-bulletin-2026-0126SE38 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:6990 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2025:6990 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01961-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-6990.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-0622 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2025-6990.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-45776 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:0586-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1216 · Vendor Advisory