A use-after-free vulnerability has been identified in the GNU GRUB (Grand Unified Bootloader). The flaw occurs because the file-closing process incorrectly retains a memory pointer, leaving an invalid reference to a file system structure. An attacker could exploit this vulnerability to cause grub to crash, leading to a Denial of Service. Possible data integrity or confidentiality compromise is not discarded.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade grub2-efi-x64-ec2Upgrade grub2-tools-minimal-debuginfoUpgrade grub2-efi-x64-cdbootUpgrade grub2-efi-aa64-ec2Upgrade grub2-efi-x64-modulesUpgrade grub2-efi-x64Upgrade grub2-efi-aa64Upgrade grub2-emuUpgrade grub2-tools-extra-debuginfoUpgrade grub2-pc-modulesUpgrade grub2-debuginfoUpgrade grub2-pcUpgrade grub2-tools-efi-debuginfoUpgrade grub2-emu-modulesUpgrade grub2-efi-aa64-modulesUpgrade grub2-toolsUpgrade grub2-tools-efiUpgrade grub2-tools-minimalUpgrade grub2-tools-debuginfoUpgrade grub2-efi-aa64-cdbootUpgrade grub2-debugsourceUpgrade grub2-commonUpgrade grub2-emu-debuginfoUpgrade grub2-tools-extra | Jan 12, 2026 | Nov 18, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade grub2-tools-minimalUpgrade grub2-tools-extraUpgrade grub2-efi-aa64Upgrade grub2-toolsUpgrade grub2-efi-aa64-modulesUpgrade grub2-common | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade grub2-efi-aa64-modulesUpgrade grub2-efi-aa64Upgrade grub2-tools-extraUpgrade grub2-tools-minimalUpgrade grub2-commonUpgrade grub2-tools | Mar 10, 2026 | Mar 10, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Nov 18, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub