Use After Free in GNU Grub2
CVE-2025-61662
A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a programming error where the gettext command remains registered in memory after its module is unloaded. An attacker can exploit this condition by invoking the orphaned command, causing the application to access a memory location that is no longer valid. An attacker could exploit this vulnerability to cause grub to crash, leading to a Denial of Service. Possible data integrity or confidentiality compromise is not discarded.
Vulnerability class: Use-After-Free
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.002 (11.6th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 12th percentile — 11.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: +0.000
Affected products
- GNU Grub2 — versions 0
- Red Hat Enterprise Linux 10 — versions 1:2.12-29.el10_1.2
- Red Hat Enterprise Linux 10.0 Extended Update Support — versions 1:2.12-15.el10_0.2
- Red Hat Enterprise Linux 7 Extended Lifecycle Support — versions 1:2.02-0.87.el7_9.16
- Red Hat Enterprise Linux 8 — versions 1:2.02-170.el8_10.1
- Red Hat Enterprise Linux 8.2 Advanced Update Support — versions 1:2.02-87.el8_2.14
- Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support — versions 1:2.02-99.el8_4.13
- Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On — versions 1:2.02-99.el8_4.13
- Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support — versions 1:2.02-123.el8_6.19
- Red Hat Enterprise Linux 8.6 Telecommunications Update Service — versions 1:2.02-123.el8_6.19
Weakness classification (CWE)
References
- access.redhat.com/errata/RHSA-2026:10097 (vendor-advisory)
- access.redhat.com/errata/RHSA-2026:4648 (vendor-advisory)
- access.redhat.com/errata/RHSA-2026:4649 (vendor-advisory)
- access.redhat.com/errata/RHSA-2026:4652 (vendor-advisory)
- access.redhat.com/errata/RHSA-2026:4653 (vendor-advisory)
- access.redhat.com/errata/RHSA-2026:4654 (vendor-advisory)
- access.redhat.com/errata/RHSA-2026:4760 (vendor-advisory)
- access.redhat.com/errata/RHSA-2026:4822 (vendor-advisory)
- access.redhat.com/errata/RHSA-2026:4823 (vendor-advisory)
- access.redhat.com/errata/RHSA-2026:4830 (vendor-advisory)
Frequently asked questions
- What is CVE-2025-61662?
- CVE-2025-61662 is a high-severity vulnerability in GNU Grub2, classified under Use After Free. CVSS score: 7.8/10. Published 2025-11-18.
- How severe is CVE-2025-61662?
- High severity. CVSS v3 base score is 7.8 out of 10.