https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:41:35.842043+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2022:2110 ALSA-2022:2110 — Low: grub2 security, bug fix, and enhancement update 2026-10-03T21:41:36.007725+00:00

Affected: AlmaLinux:8: grub2-common, AlmaLinux:8: grub2-efi-aa64, AlmaLinux:8: grub2-efi-aa64-cdboot, AlmaLinux:8: grub2-efi-aa64-modules, AlmaLinux:8: grub2-efi-ia32, AlmaLinux:8: grub2-efi-ia32-cdboot, AlmaLinux:8: grub2-efi-ia32-modules, AlmaLinux:8: grub2-efi-x64, AlmaLinux:8: grub2-efi-x64-cdboot, AlmaLinux:8: grub2-efi-x64-modules and 8 more

The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.

Security Fix(es):

* grub2: Incorrect permission in grub.cfg allow unprivileged user to read the file content (CVE-2021-3981)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-07627 bdu:2023-07627 2026-10-03T21:41:36.007810+00:00 bdu:2023-07627 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0726 certfr-2023-avi-0726 — De multiples vulnérabilités ont été découvertes dans <span class="textit">le noyau Linux d'Ubuntu</span>. Certaines d'e… 2026-10-03T21:41:36.007828+00:00 certfr-2023-avi-0726 https://cve.radiocsirt.org/vuln/euvd-2026-215978 EUVD-2026-215978 2026-10-03T21:41:36.007844+00:00 EUVD-2026-215978 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3981 fkie_cve-2021-3981 2026-10-03T21:41:36.007855+00:00

A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg. This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no version with the fix is currently released.

 https://cve.radiocsirt.org/vuln/ghsa-6hfm-rxpf-979r GHSA-6hfm-rxpf-979r 2026-10-03T21:41:36.007880+00:00

A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg. This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no version with the fix is currently released.

 https://cve.radiocsirt.org/vuln/gsd-2021-3981 gsd-2021-3981 2026-10-03T21:41:36.007896+00:00 gsd-2021-3981 https://cve.radiocsirt.org/vuln/msrc_cve-2021-3981 msrc_CVE-2021-3981 — A flaw in grub2 was found where its configuration file known as grub.cfg is being created with the wrong permission set… 2026-10-03T21:41:36.007907+00:00 msrc_CVE-2021-3981 https://cve.radiocsirt.org/vuln/oesa-2022-1597 OESA-2022-1597 — grub2 security update 2026-10-03T21:41:36.007924+00:00

Affected: openEuler:20.03-LTS-SP1: grub2, openEuler:20.03-LTS-SP2: grub2, openEuler:20.03-LTS-SP3: grub2

GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn. Security Fix(es): A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg. This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no version with the fix is currently released.(CVE-2021-3981)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11700-1 openSUSE-SU-2024:11700-1 — grub2-2.06-13.1 on GA media 2026-10-03T21:41:36.007951+00:00

grub2-2.06-13.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3981 UBUNTU-CVE-2021-3981 2026-10-03T21:41:36.007967+00:00

Affected: Ubuntu:Pro:14.04:LTS: grub2-signed, Ubuntu:16.04:LTS: grub2-signed, Ubuntu:16.04:LTS: grub2-unsigned, Ubuntu:18.04:LTS: grub2-signed, Ubuntu:18.04:LTS: grub2-unsigned, Ubuntu:20.04:LTS: grub2-signed, Ubuntu:20.04:LTS: grub2-unsigned, Ubuntu:22.04:LTS: grub2-signed, Ubuntu:22.04:LTS: grub2-unsigned

A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg. This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no version with the fix is currently released.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0452 WID-SEC-W-2022-0452 — Grub2: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-03T21:41:36.007997+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Grub2 ausnutzen, um Informationen offenzulegen.