Use After Free in GNU Grub2
CVE-2025-61662
A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a programming error where the gettext command remains registered in memory after its module is unloaded. An attacker can exploit this condition by invoking the orphaned command, causing the application to access a memory location that is no longer valid. An attacker could exploit this vulnerability to cause grub to crash, leading to a Denial of Service. Possible data integrity or confidentiality compromise is not discarded.
Vulnerability class: Use-After-Free
EPSS: 0.002 (10.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Gnu Grub2 — versions 0
- Red Hat Enterprise Linux 10 — versions 1:2.12-29.el10_1.2
- Red Hat Enterprise Linux 10.0 Extended Update Support — versions 1:2.12-15.el10_0.2
- Red Hat Enterprise Linux 7 Extended Lifecycle Support — versions 1:2.02-0.87.el7_9.16
- Red Hat Enterprise Linux 8 — versions 1:2.02-170.el8_10.1
- Red Hat Enterprise Linux 8.2 Advanced Update Support — versions 1:2.02-87.el8_2.14
- Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support — versions 1:2.02-99.el8_4.13
- Red Hat Enterprise Linux 8.4 Extended Update Support Long-life Add-on — versions 1:2.02-99.el8_4.13
- Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support — versions 1:2.02-123.el8_6.19
- Red Hat Enterprise Linux 8.6 Telecommunications Update Service — versions 1:2.02-123.el8_6.19
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
Frequently asked questions
- What is CVE-2025-61662?
- CVE-2025-61662 is a high-severity vulnerability in GNU Grub2, classified under Use After Free. CVSS score: 7.8/10. Published 2025-11-18.
- How severe is CVE-2025-61662?
- High severity. CVSS v3 base score is 7.8 out of 10.