There's a use-after-free vulnerability in grub_cmd_chainloader() function; The chainloader command is used to boot up operating systems that doesn't support multiboot and do not have direct support from GRUB2. When executing chainloader more than once a use-after-free vulnerability is triggered. If an attacker can control the GRUB2's memory allocation pattern sensitive data may be exposed and arbitrary code execution can be achieved.
CVSS Details
- CVSS 3.1 Base Score: 6.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-grub2-commonalma-upgrade-grub2-efi-aa64alma-upgrade-grub2-efi-aa64-cdbootalma-upgrade-grub2-efi-aa64-modulesalma-upgrade-grub2-efi-ia32alma-upgrade-grub2-efi-ia32-cdbootalma-upgrade-grub2-efi-ia32-modulesalma-upgrade-grub2-efi-x64alma-upgrade-grub2-efi-x64-cdbootalma-upgrade-grub2-efi-x64-modulesalma-upgrade-grub2-pcalma-upgrade-grub2-pc-modulesalma-upgrade-grub2-ppc64lealma-upgrade-grub2-ppc64le-modulesalma-upgrade-grub2-toolsalma-upgrade-grub2-tools-efialma-upgrade-grub2-tools-extraalma-upgrade-grub2-tools-minimalalma-upgrade-shim-aa64alma-upgrade-shim-ia32alma-upgrade-shim-unsigned-x64alma-upgrade-shim-x64 | Aug 24, 2022 | Jun 16, 2022 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-grub2amazon-linux-ami-2-upgrade-grub2-commonamazon-linux-ami-2-upgrade-grub2-debuginfoamazon-linux-ami-2-upgrade-grub2-efi-aa64amazon-linux-ami-2-upgrade-grub2-efi-aa64-cdbootamazon-linux-ami-2-upgrade-grub2-efi-aa64-ec2amazon-linux-ami-2-upgrade-grub2-efi-aa64-modulesamazon-linux-ami-2-upgrade-grub2-efi-x64amazon-linux-ami-2-upgrade-grub2-efi-x64-cdbootamazon-linux-ami-2-upgrade-grub2-efi-x64-ec2amazon-linux-ami-2-upgrade-grub2-efi-x64-modulesamazon-linux-ami-2-upgrade-grub2-emuamazon-linux-ami-2-upgrade-grub2-emu-modulesamazon-linux-ami-2-upgrade-grub2-pcamazon-linux-ami-2-upgrade-grub2-pc-modulesamazon-linux-ami-2-upgrade-grub2-toolsamazon-linux-ami-2-upgrade-grub2-tools-efiamazon-linux-ami-2-upgrade-grub2-tools-extraamazon-linux-ami-2-upgrade-grub2-tools-minimal | Jul 21, 2023 | Jul 20, 2023 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-grub2-commonamazon-linux-2023-upgrade-grub2-debuginfoamazon-linux-2023-upgrade-grub2-debugsourceamazon-linux-2023-upgrade-grub2-efi-aa64amazon-linux-2023-upgrade-grub2-efi-aa64-cdbootamazon-linux-2023-upgrade-grub2-efi-aa64-ec2amazon-linux-2023-upgrade-grub2-efi-aa64-modulesamazon-linux-2023-upgrade-grub2-efi-x64amazon-linux-2023-upgrade-grub2-efi-x64-cdbootamazon-linux-2023-upgrade-grub2-efi-x64-ec2amazon-linux-2023-upgrade-grub2-efi-x64-modulesamazon-linux-2023-upgrade-grub2-emuamazon-linux-2023-upgrade-grub2-emu-debuginfoamazon-linux-2023-upgrade-grub2-emu-modulesamazon-linux-2023-upgrade-grub2-pcamazon-linux-2023-upgrade-grub2-pc-modulesamazon-linux-2023-upgrade-grub2-toolsamazon-linux-2023-upgrade-grub2-tools-debuginfoamazon-linux-2023-upgrade-grub2-tools-efiamazon-linux-2023-upgrade-grub2-tools-efi-debuginfoamazon-linux-2023-upgrade-grub2-tools-extraamazon-linux-2023-upgrade-grub2-tools-extra-debuginfoamazon-linux-2023-upgrade-grub2-tools-minimalamazon-linux-2023-upgrade-grub2-tools-minimal-debuginfo | Feb 17, 2025 | Jun 7, 2022 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Jul 20, 2023 | |
| Centos_linux | — | centos-upgrade-grub2-commoncentos-upgrade-grub2-debuginfocentos-upgrade-grub2-debugsourcecentos-upgrade-grub2-efi-aa64-modulescentos-upgrade-grub2-efi-ia32centos-upgrade-grub2-efi-ia32-cdbootcentos-upgrade-grub2-efi-ia32-modulescentos-upgrade-grub2-efi-x64centos-upgrade-grub2-efi-x64-cdbootcentos-upgrade-grub2-efi-x64-modulescentos-upgrade-grub2-emu-debuginfocentos-upgrade-grub2-pccentos-upgrade-grub2-pc-modulescentos-upgrade-grub2-ppc64le-modulescentos-upgrade-grub2-toolscentos-upgrade-grub2-tools-debuginfocentos-upgrade-grub2-tools-eficentos-upgrade-grub2-tools-efi-debuginfocentos-upgrade-grub2-tools-extracentos-upgrade-grub2-tools-extra-debuginfocentos-upgrade-grub2-tools-minimalcentos-upgrade-grub2-tools-minimal-debuginfocentos-upgrade-mokutilcentos-upgrade-mokutil-debuginfocentos-upgrade-mokutil-debugsourcecentos-upgrade-shim-ia32centos-upgrade-shim-x64 | Jun 17, 2022 | Jun 16, 2022 |
| Debian | debian-upgrade-grub2 | Jul 30, 2024 | Jul 20, 2023 | |
| Dell Powerstore Dsa2023173 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Jun 21, 2023 | |
| Gentoo Linux | gentoo-linux-upgrade-sys-boot-grub | Sep 26, 2022 | Sep 25, 2022 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-grub2-commonhuawei-euleros-2_0_sp10-upgrade-grub2-efi-x64huawei-euleros-2_0_sp10-upgrade-grub2-efi-x64-moduleshuawei-euleros-2_0_sp10-upgrade-grub2-pchuawei-euleros-2_0_sp10-upgrade-grub2-pc-moduleshuawei-euleros-2_0_sp10-upgrade-grub2-toolshuawei-euleros-2_0_sp10-upgrade-grub2-tools-efihuawei-euleros-2_0_sp10-upgrade-grub2-tools-extrahuawei-euleros-2_0_sp10-upgrade-grub2-tools-minimal | Aug 18, 2022 | Aug 16, 2022 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-grub2-commonhuawei-euleros-2_0_sp8-upgrade-grub2-efi-aa64huawei-euleros-2_0_sp8-upgrade-grub2-efi-aa64-cdboothuawei-euleros-2_0_sp8-upgrade-grub2-efi-aa64-moduleshuawei-euleros-2_0_sp8-upgrade-grub2-toolshuawei-euleros-2_0_sp8-upgrade-grub2-tools-extrahuawei-euleros-2_0_sp8-upgrade-grub2-tools-minimal | Aug 18, 2022 | Aug 16, 2022 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-grub2-commonhuawei-euleros-2_0_sp9-upgrade-grub2-efi-aa64huawei-euleros-2_0_sp9-upgrade-grub2-efi-aa64-moduleshuawei-euleros-2_0_sp9-upgrade-grub2-toolshuawei-euleros-2_0_sp9-upgrade-grub2-tools-extrahuawei-euleros-2_0_sp9-upgrade-grub2-tools-minimal | Sep 14, 2022 | Aug 16, 2022 | |
| Oracle_linux | — | oracle-linux-upgrade-grub2oracle-linux-upgrade-grub2-commonoracle-linux-upgrade-grub2-efi-aa64oracle-linux-upgrade-grub2-efi-aa64-cdbootoracle-linux-upgrade-grub2-efi-aa64-modulesoracle-linux-upgrade-grub2-efi-ia32oracle-linux-upgrade-grub2-efi-ia32-cdbootoracle-linux-upgrade-grub2-efi-ia32-modulesoracle-linux-upgrade-grub2-efi-x64oracle-linux-upgrade-grub2-efi-x64-cdbootoracle-linux-upgrade-grub2-efi-x64-modulesoracle-linux-upgrade-grub2-pcoracle-linux-upgrade-grub2-pc-modulesoracle-linux-upgrade-grub2-toolsoracle-linux-upgrade-grub2-tools-efioracle-linux-upgrade-grub2-tools-extraoracle-linux-upgrade-grub2-tools-minimal | Jun 8, 2022 | Jun 7, 2022 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-grub2-commonredhat-upgrade-grub2-debuginforedhat-upgrade-grub2-debugsourceredhat-upgrade-grub2-efi-aa64-modulesredhat-upgrade-grub2-efi-ia32redhat-upgrade-grub2-efi-ia32-cdbootredhat-upgrade-grub2-efi-ia32-modulesredhat-upgrade-grub2-efi-x64redhat-upgrade-grub2-efi-x64-cdbootredhat-upgrade-grub2-efi-x64-modulesredhat-upgrade-grub2-emu-debuginforedhat-upgrade-grub2-pcredhat-upgrade-grub2-pc-modulesredhat-upgrade-grub2-ppc64le-modulesredhat-upgrade-grub2-toolsredhat-upgrade-grub2-tools-debuginforedhat-upgrade-grub2-tools-efiredhat-upgrade-grub2-tools-efi-debuginforedhat-upgrade-grub2-tools-extraredhat-upgrade-grub2-tools-extra-debuginforedhat-upgrade-grub2-tools-minimalredhat-upgrade-grub2-tools-minimal-debuginforedhat-upgrade-mokutilredhat-upgrade-mokutil-debuginforedhat-upgrade-mokutil-debugsourceredhat-upgrade-shim-ia32redhat-upgrade-shim-unsigned-x64redhat-upgrade-shim-x64 | Jun 17, 2022 | Jun 16, 2022 | |
| Rocky_linux | rocky-upgrade-grub2-debuginforocky-upgrade-grub2-debugsourcerocky-upgrade-grub2-efi-ia32rocky-upgrade-grub2-efi-ia32-cdbootrocky-upgrade-grub2-efi-x64rocky-upgrade-grub2-efi-x64-cdbootrocky-upgrade-grub2-pcrocky-upgrade-grub2-toolsrocky-upgrade-grub2-tools-debuginforocky-upgrade-grub2-tools-efirocky-upgrade-grub2-tools-efi-debuginforocky-upgrade-grub2-tools-extrarocky-upgrade-grub2-tools-extra-debuginforocky-upgrade-grub2-tools-minimalrocky-upgrade-grub2-tools-minimal-debuginforocky-upgrade-mokutilrocky-upgrade-mokutil-debuginforocky-upgrade-mokutil-debugsourcerocky-upgrade-shim-ia32rocky-upgrade-shim-unsigned-x64rocky-upgrade-shim-x64 | Jul 11, 2022 | Jul 7, 2022 | |
| Suse | — | suse-upgrade-grub2suse-upgrade-grub2-arm64-efisuse-upgrade-grub2-arm64-efi-debugsuse-upgrade-grub2-branding-upstreamsuse-upgrade-grub2-i386-pcsuse-upgrade-grub2-i386-pc-debugsuse-upgrade-grub2-powerpc-ieee1275suse-upgrade-grub2-powerpc-ieee1275-debugsuse-upgrade-grub2-s390x-emususe-upgrade-grub2-s390x-emu-debugsuse-upgrade-grub2-snapper-pluginsuse-upgrade-grub2-systemd-sleep-pluginsuse-upgrade-grub2-x86_64-efisuse-upgrade-grub2-x86_64-efi-debugsuse-upgrade-grub2-x86_64-xen | Oct 26, 2022 | Jul 10, 2022 |
| Ubuntu | ubuntu-upgrade-grub-efi-amd64ubuntu-upgrade-grub-efi-amd64-binubuntu-upgrade-grub-efi-amd64-signedubuntu-upgrade-grub-efi-arm64ubuntu-upgrade-grub-efi-arm64-binubuntu-upgrade-grub-efi-arm64-signedubuntu-upgrade-shimubuntu-upgrade-shim-signed | Sep 18, 2023 | Jul 20, 2023 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jul 20, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub