https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:59:11 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:2456 <p><strong>Affected:</strong> AlmaLinux:9: grub2-common, AlmaLinux:9: grub2-efi-aa64, AlmaLinux:9: grub2-efi-aa64-cdboot, AlmaLinux:9: grub2-efi-aa64-modules, AlmaLinux:9: grub2-efi-x64, AlmaLinux:9: grub2-efi-x64-cdboot, AlmaLinux:9: grub2-efi-x64-modules, AlmaLinux:9: grub2-pc, AlmaLinux:9: grub2-pc-modules, AlmaLinux:9: grub2-ppc64le and 5 more</p> <p>The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.</p> <p>Security Fix(es):</p> <p>* grub2: grub2-set-bootflag can be abused by local (pseudo-)users (CVE-2024-1048) * grub2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code execution (CVE-2023-4692) * grub2: out-of-bounds read at fs/ntfs.c (CVE-2023-4693)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: grub2-common, AlmaLinux:9: grub2-efi-aa64, AlmaLinux:9: grub2-efi-aa64-cdboot, AlmaLinux:9: grub2-efi-aa64-modules, AlmaLinux:9: grub2-efi-x64, AlmaLinux:9: grub2-efi-x64-cdboot, AlmaLinux:9: grub2-efi-x64-modules, AlmaLinux:9: grub2-pc, AlmaLinux:9: grub2-pc-modules, AlmaLinux:9: grub2-ppc64le and 5 more</p> <p>The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices.</p> <p>Security Fix(es):</p> <p>* grub2: grub2-set-bootflag can be abused by local (pseudo-)users (CVE-2024-1048) * grub2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code execution (CVE-2023-4692) * grub2: out-of-bounds read at fs/ntfs.c (CVE-2023-4693)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:2456 https://cve.radiocsirt.org/vuln/bdu:2024-01386 bdu:2024-01386 https://cve.radiocsirt.org/vuln/bdu:2024-01386 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0720 certfr-2024-avi-0720 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0720 https://cve.radiocsirt.org/vuln/euvd-2026-261509 EUVD-2026-261509 https://cve.radiocsirt.org/vuln/euvd-2026-261509 https://cve.radiocsirt.org/vuln/fkie_cve-2024-1048 <p>A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-bootflag will create a temporary file with the new grubenv content and rename it to the original grubenv file. If the program is killed before the rename operation, the temporary file will not be removed and may fill the filesystem when invoked multiple times, resulting in a filesystem out of free inodes or blocks.</p> <p>A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-bootflag will create a temporary file with the new grubenv content and rename it to the original grubenv file. If the program is killed before the rename operation, the temporary file will not be removed and may fill the filesystem when invoked multiple times, resulting in a filesystem out of free inodes or blocks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-1048 https://cve.radiocsirt.org/vuln/ghsa-3qrv-r8v8-pmw7 <p>A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-bootflag will create a temporary file with the new grubenv content and rename it to the original grubenv file. If the program is killed before the rename operation, the temporary file will not be removed and may fill the filesystem when invoked multiple times, resulting in a filesystem out of free inodes or blocks.</p> <p>A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-bootflag will create a temporary file with the new grubenv content and rename it to the original grubenv file. If the program is killed before the rename operation, the temporary file will not be removed and may fill the filesystem when invoked multiple times, resulting in a filesystem out of free inodes or blocks.</p> https://cve.radiocsirt.org/vuln/ghsa-3qrv-r8v8-pmw7 https://cve.radiocsirt.org/vuln/gsd-2024-1048 gsd-2024-1048 https://cve.radiocsirt.org/vuln/gsd-2024-1048 https://cve.radiocsirt.org/vuln/oesa-2024-1253 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: grub2, openEuler:20.03-LTS-SP4: grub2, openEuler:22.03-LTS: grub2, openEuler:22.03-LTS-SP1: grub2, openEuler:22.03-LTS-SP2: grub2, openEuler:22.03-LTS-SP3: grub2</p> <p>GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn. Security Fix(es): A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-bootflag will create a temporary file with the new grubenv content and rename it to the original grubenv file. If the program is killed before the rename operation, the temporary file will not be removed and may fill the filesystem when invoked multiple times, resulting in a filesystem out of free inodes or blocks.(CVE-2024-1048)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: grub2, openEuler:20.03-LTS-SP4: grub2, openEuler:22.03-LTS: grub2, openEuler:22.03-LTS-SP1: grub2, openEuler:22.03-LTS-SP2: grub2, openEuler:22.03-LTS-SP3: grub2</p> <p>GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn. Security Fix(es): A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-bootflag will create a temporary file with the new grubenv content and rename it to the original grubenv file. If the program is killed before the rename operation, the temporary file will not be removed and may fill the filesystem when invoked multiple times, resulting in a filesystem out of free inodes or blocks.(CVE-2024-1048)</p> https://cve.radiocsirt.org/vuln/oesa-2024-1253 https://cve.radiocsirt.org/vuln/rhsa-2024:2456 <p>grub2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code execution grub2: out-of-bounds read at fs/ntfs.c grub2: grub2-set-bootflag can be abused by local (pseudo-)users</p> <p>grub2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code execution grub2: out-of-bounds read at fs/ntfs.c grub2: grub2-set-bootflag can be abused by local (pseudo-)users</p> https://cve.radiocsirt.org/vuln/rhsa-2024:2456 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0308 <p>Ein lokaler Angreifer kann eine Schwachstelle in Grub ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in Grub ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0308