A flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the unloading of a module used as a dependency without checking if any other dependent module is still loaded leading to a use-after-free scenario. This could allow arbitrary code to be executed or a bypass of Secure Boot protections. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-shim-aa64alma-upgrade-shim-ia32alma-upgrade-shim-unsigned-aarch64alma-upgrade-shim-unsigned-x64alma-upgrade-shim-x64 | May 4, 2022 | Mar 3, 2021 | |
| Alpine Linux | alpine-linux-upgrade-grub | Aug 22, 2024 | Mar 3, 2021 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-grub2amazon-linux-ami-2-upgrade-grub2-commonamazon-linux-ami-2-upgrade-grub2-debuginfoamazon-linux-ami-2-upgrade-grub2-efi-aa64amazon-linux-ami-2-upgrade-grub2-efi-aa64-cdbootamazon-linux-ami-2-upgrade-grub2-efi-aa64-ec2amazon-linux-ami-2-upgrade-grub2-efi-aa64-modulesamazon-linux-ami-2-upgrade-grub2-efi-x64amazon-linux-ami-2-upgrade-grub2-efi-x64-cdbootamazon-linux-ami-2-upgrade-grub2-efi-x64-ec2amazon-linux-ami-2-upgrade-grub2-efi-x64-modulesamazon-linux-ami-2-upgrade-grub2-emuamazon-linux-ami-2-upgrade-grub2-emu-modulesamazon-linux-ami-2-upgrade-grub2-pcamazon-linux-ami-2-upgrade-grub2-pc-modulesamazon-linux-ami-2-upgrade-grub2-toolsamazon-linux-ami-2-upgrade-grub2-tools-efiamazon-linux-ami-2-upgrade-grub2-tools-extraamazon-linux-ami-2-upgrade-grub2-tools-minimal | Jul 19, 2021 | Mar 3, 2021 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Mar 3, 2021 | |
| Centos_linux | — | centos-upgrade-fwupdcentos-upgrade-fwupd-debuginfocentos-upgrade-fwupd-debugsourcecentos-upgrade-fwupd-tests-debuginfocentos-upgrade-grub2centos-upgrade-grub2-commoncentos-upgrade-grub2-debuginfocentos-upgrade-grub2-debugsourcecentos-upgrade-grub2-efi-aa64-modulescentos-upgrade-grub2-efi-ia32centos-upgrade-grub2-efi-ia32-cdbootcentos-upgrade-grub2-efi-ia32-modulescentos-upgrade-grub2-efi-x64centos-upgrade-grub2-efi-x64-cdbootcentos-upgrade-grub2-efi-x64-modulescentos-upgrade-grub2-pccentos-upgrade-grub2-pc-modulescentos-upgrade-grub2-ppc-modulescentos-upgrade-grub2-ppc64-modulescentos-upgrade-grub2-ppc64le-modulescentos-upgrade-grub2-toolscentos-upgrade-grub2-tools-debuginfocentos-upgrade-grub2-tools-eficentos-upgrade-grub2-tools-efi-debuginfocentos-upgrade-grub2-tools-extracentos-upgrade-grub2-tools-extra-debuginfocentos-upgrade-grub2-tools-minimalcentos-upgrade-grub2-tools-minimal-debuginfocentos-upgrade-shim-ia32centos-upgrade-shim-x64 | Mar 3, 2021 | Mar 2, 2021 |
| Debian | debian-upgrade-grub2 | Mar 4, 2021 | Mar 4, 2021 | |
| Gentoo Linux | gentoo-linux-upgrade-sys-devel-grub | May 3, 2021 | Mar 3, 2021 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-grub2huawei-euleros-2_0_sp2-upgrade-grub2-commonhuawei-euleros-2_0_sp2-upgrade-grub2-efi-x64huawei-euleros-2_0_sp2-upgrade-grub2-pchuawei-euleros-2_0_sp2-upgrade-grub2-pc-moduleshuawei-euleros-2_0_sp2-upgrade-grub2-toolshuawei-euleros-2_0_sp2-upgrade-grub2-tools-extrahuawei-euleros-2_0_sp2-upgrade-grub2-tools-minimal | Sep 16, 2021 | Mar 3, 2021 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-grub2huawei-euleros-2_0_sp3-upgrade-grub2-commonhuawei-euleros-2_0_sp3-upgrade-grub2-efi-x64huawei-euleros-2_0_sp3-upgrade-grub2-efi-x64-cdboothuawei-euleros-2_0_sp3-upgrade-grub2-efi-x64-moduleshuawei-euleros-2_0_sp3-upgrade-grub2-pchuawei-euleros-2_0_sp3-upgrade-grub2-pc-moduleshuawei-euleros-2_0_sp3-upgrade-grub2-toolshuawei-euleros-2_0_sp3-upgrade-grub2-tools-extrahuawei-euleros-2_0_sp3-upgrade-grub2-tools-minimal | Apr 30, 2021 | Mar 3, 2021 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-grub2huawei-euleros-2_0_sp5-upgrade-grub2-commonhuawei-euleros-2_0_sp5-upgrade-grub2-efi-ia32huawei-euleros-2_0_sp5-upgrade-grub2-efi-ia32-cdboothuawei-euleros-2_0_sp5-upgrade-grub2-efi-x64huawei-euleros-2_0_sp5-upgrade-grub2-efi-x64-cdboothuawei-euleros-2_0_sp5-upgrade-grub2-efi-x64-moduleshuawei-euleros-2_0_sp5-upgrade-grub2-pchuawei-euleros-2_0_sp5-upgrade-grub2-pc-moduleshuawei-euleros-2_0_sp5-upgrade-grub2-toolshuawei-euleros-2_0_sp5-upgrade-grub2-tools-extrahuawei-euleros-2_0_sp5-upgrade-grub2-tools-minimal | May 19, 2021 | Mar 3, 2021 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-grub2-commonhuawei-euleros-2_0_sp8-upgrade-grub2-efi-aa64huawei-euleros-2_0_sp8-upgrade-grub2-efi-aa64-cdboothuawei-euleros-2_0_sp8-upgrade-grub2-efi-aa64-moduleshuawei-euleros-2_0_sp8-upgrade-grub2-toolshuawei-euleros-2_0_sp8-upgrade-grub2-tools-extrahuawei-euleros-2_0_sp8-upgrade-grub2-tools-minimal | May 18, 2021 | Mar 3, 2021 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-grub2-commonhuawei-euleros-2_0_sp9-upgrade-grub2-efi-aa64huawei-euleros-2_0_sp9-upgrade-grub2-efi-aa64-moduleshuawei-euleros-2_0_sp9-upgrade-grub2-toolshuawei-euleros-2_0_sp9-upgrade-grub2-tools-extrahuawei-euleros-2_0_sp9-upgrade-grub2-tools-minimal | Jun 2, 2021 | Mar 3, 2021 | |
| Oracle_linux | — | oracle-linux-upgrade-grub2oracle-linux-upgrade-grub2-commonoracle-linux-upgrade-grub2-efi-aa64oracle-linux-upgrade-grub2-efi-aa64-cdbootoracle-linux-upgrade-grub2-efi-aa64-modulesoracle-linux-upgrade-grub2-efi-ia32oracle-linux-upgrade-grub2-efi-ia32-cdbootoracle-linux-upgrade-grub2-efi-ia32-modulesoracle-linux-upgrade-grub2-efi-x64oracle-linux-upgrade-grub2-efi-x64-cdbootoracle-linux-upgrade-grub2-efi-x64-modulesoracle-linux-upgrade-grub2-pcoracle-linux-upgrade-grub2-pc-modulesoracle-linux-upgrade-grub2-toolsoracle-linux-upgrade-grub2-tools-efioracle-linux-upgrade-grub2-tools-extraoracle-linux-upgrade-grub2-tools-minimal | Mar 3, 2021 | Mar 2, 2021 |
| Redhat_linux | redhat-upgrade-fwupdredhat-upgrade-fwupd-debuginforedhat-upgrade-fwupd-debugsourceredhat-upgrade-fwupd-tests-debuginforedhat-upgrade-grub2redhat-upgrade-grub2-commonredhat-upgrade-grub2-debuginforedhat-upgrade-grub2-debugsourceredhat-upgrade-grub2-efi-aa64-modulesredhat-upgrade-grub2-efi-ia32redhat-upgrade-grub2-efi-ia32-cdbootredhat-upgrade-grub2-efi-ia32-modulesredhat-upgrade-grub2-efi-x64redhat-upgrade-grub2-efi-x64-cdbootredhat-upgrade-grub2-efi-x64-modulesredhat-upgrade-grub2-pcredhat-upgrade-grub2-pc-modulesredhat-upgrade-grub2-ppc-modulesredhat-upgrade-grub2-ppc64-modulesredhat-upgrade-grub2-ppc64le-modulesredhat-upgrade-grub2-toolsredhat-upgrade-grub2-tools-debuginforedhat-upgrade-grub2-tools-efiredhat-upgrade-grub2-tools-efi-debuginforedhat-upgrade-grub2-tools-extraredhat-upgrade-grub2-tools-extra-debuginforedhat-upgrade-grub2-tools-minimalredhat-upgrade-grub2-tools-minimal-debuginforedhat-upgrade-shim-ia32redhat-upgrade-shim-unsigned-x64redhat-upgrade-shim-x64 | Mar 3, 2021 | Mar 2, 2021 | |
| Rocky_linux | rocky-upgrade-fwupdrocky-upgrade-fwupd-debuginforocky-upgrade-fwupd-debugsource | Mar 12, 2024 | Mar 3, 2021 | |
| Suse | — | suse-upgrade-grub2suse-upgrade-grub2-arm64-efisuse-upgrade-grub2-branding-upstreamsuse-upgrade-grub2-i386-efisuse-upgrade-grub2-i386-efi-debugsuse-upgrade-grub2-i386-pcsuse-upgrade-grub2-i386-pc-debugsuse-upgrade-grub2-i386-xensuse-upgrade-grub2-powerpc-ieee1275suse-upgrade-grub2-s390x-emususe-upgrade-grub2-snapper-pluginsuse-upgrade-grub2-systemd-sleep-pluginsuse-upgrade-grub2-x86_64-efisuse-upgrade-grub2-x86_64-efi-debugsuse-upgrade-grub2-x86_64-xen | Mar 3, 2021 | Mar 2, 2021 |
| Ubuntu | ubuntu-upgrade-grub-efi-amd64-binubuntu-upgrade-grub-efi-amd64-signedubuntu-upgrade-grub-efi-arm64-binubuntu-upgrade-grub-efi-arm64-signed | Jun 18, 2021 | Mar 2, 2021 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Mar 3, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub