Red Hat: CVE-2025-0624: grub2: net: Out-of-bounds write in grub_net_search_config_file() (Multiple Advisories)
Description
A flaw was found in grub2. During the network boot process, when trying to search for the configuration file, grub copies data from a user controlled environment variable into an internal buffer using the grub_strcpy() function. During this step, it fails to consider the environment variable length when allocating the internal buffer, resulting in an out-of-bounds write. If correctly exploited, this issue may result in remote code execution through the same network segment grub is searching for the boot information, which can be used to by-pass secure boot protections.
Solution(s)
- redhat-upgrade-grub2-common
- redhat-upgrade-grub2-debuginfo
- redhat-upgrade-grub2-debugsource
- redhat-upgrade-grub2-efi-aa64-modules
- redhat-upgrade-grub2-efi-ia32
- redhat-upgrade-grub2-efi-ia32-cdboot
- redhat-upgrade-grub2-efi-ia32-modules
- redhat-upgrade-grub2-efi-x64
- redhat-upgrade-grub2-efi-x64-cdboot
- redhat-upgrade-grub2-efi-x64-modules
- redhat-upgrade-grub2-emu-debuginfo
- redhat-upgrade-grub2-pc
- redhat-upgrade-grub2-pc-modules
- redhat-upgrade-grub2-ppc64le-modules
- redhat-upgrade-grub2-tools
- redhat-upgrade-grub2-tools-debuginfo
- redhat-upgrade-grub2-tools-efi
- redhat-upgrade-grub2-tools-efi-debuginfo
- redhat-upgrade-grub2-tools-extra
- redhat-upgrade-grub2-tools-extra-debuginfo
- redhat-upgrade-grub2-tools-minimal
- redhat-upgrade-grub2-tools-minimal-debuginfo
- Lightweight Endpoint Agent
- Live Dashboards
- Real Risk Prioritization
- IT-Integrated Remediation Projects
- Cloud, Virtual, and Container Assessment
- Integrated Threat Feeds
- Easy-to-Use RESTful API
- Automation-Assisted Patching
- Automated Containment
With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.
– Scott Cheney, Manager of Information Security, Sierra View Medical Center