https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:57:15 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-14787 bdu:2025-14787 https://cve.radiocsirt.org/vuln/bdu:2025-14787 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1064 certfr-2025-avi-1064 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1064 https://cve.radiocsirt.org/vuln/euvd-2026-362235 EUVD-2026-362235 https://cve.radiocsirt.org/vuln/euvd-2026-362235 https://cve.radiocsirt.org/vuln/fkie_cve-2025-61663 <p>A vulnerability has been identified in the GRUB2 bootloader&#39;s normal command that poses an immediate Denial of Service (DoS) risk. This flaw is a Use-after-Free issue, caused because the normal command is not properly unregistered when the module is unloaded. An attacker who can execute this command can force the system to access memory locations that are no longer valid. Successful exploitation leads directly to system instability, which can result in a complete crash and halt system availability. Impact on the data integrity and confidentiality is also not discarded.</p> <p>A vulnerability has been identified in the GRUB2 bootloader&#39;s normal command that poses an immediate Denial of Service (DoS) risk. This flaw is a Use-after-Free issue, caused because the normal command is not properly unregistered when the module is unloaded. An attacker who can execute this command can force the system to access memory locations that are no longer valid. Successful exploitation leads directly to system instability, which can result in a complete crash and halt system availability. Impact on the data integrity and confidentiality is also not discarded.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-61663 https://cve.radiocsirt.org/vuln/ghsa-jf88-7285-jch4 <p>A vulnerability has been identified in the GRUB2 bootloader&#39;s normal command that poses an immediate Denial of Service (DoS) risk. This flaw is a Use-after-Free issue, caused because the normal command is not properly unregistered when the module is unloaded. An attacker who can execute this command can force the system to access memory locations that are no longer valid. Successful exploitation leads directly to system instability, which can result in a complete crash and halt system availability. Impact on the data integrity and confidentiality is also not discarded.</p> <p>A vulnerability has been identified in the GRUB2 bootloader&#39;s normal command that poses an immediate Denial of Service (DoS) risk. This flaw is a Use-after-Free issue, caused because the normal command is not properly unregistered when the module is unloaded. An attacker who can execute this command can force the system to access memory locations that are no longer valid. Successful exploitation leads directly to system instability, which can result in a complete crash and halt system availability. Impact on the data integrity and confidentiality is also not discarded.</p> https://cve.radiocsirt.org/vuln/ghsa-jf88-7285-jch4 https://cve.radiocsirt.org/vuln/msrc_cve-2025-61663 msrc_CVE-2025-61663 https://cve.radiocsirt.org/vuln/msrc_cve-2025-61663 https://cve.radiocsirt.org/vuln/oesa-2025-2735 <p><strong>Affected:</strong> openEuler:24.03-LTS: grub2</p> <p>GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn. Security Fix(es):</p> <p>A vulnerability has been identified in the GRUB2 bootloader&amp;apos;s network module that poses an immediate Denial of Service (DoS) risk. This flaw is a Use-after-Free issue, caused because the net_set_vlan command is not properly unregistered when the network module is unloaded from memory. An attacker who can execute this command can force the system to access memory locations that are no longer valid. Successful exploitation leads directly to system instability, which can result in a complete crash and halt system availability(CVE-2025-54770)</p> <p>A use-after-free vulnerability has been identified in the GNU GRUB (Grand Unified Bootloader). The flaw occurs because the file-closing process incorrectly retains a memory pointer, leaving an invalid reference to a file system structure. An attacker could exploit this vulnerability to cause grub to crash, leading to a Denial of Service. Possible data integrity or confidentiality compromise is not discarded.(CVE-2025-54771)</p> <p>A vulnerability has been identified in the GRUB (Grand Unified Bootloader) component. This flaw occurs because the bootloader mishandles string conversion when reading information from a USB device, allowing an attacker to exploit inconsistent length values. A local attacker can connect a maliciously configured USB device during the…</p> <p><strong>Affected:</strong> openEuler:24.03-LTS: grub2</p> <p>GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn. Security Fix(es):</p> <p>A vulnerability has been identified in the GRUB2 bootloader&amp;apos;s network module that poses an immediate Denial of Service (DoS) risk. This flaw is a Use-after-Free issue, caused because the net_set_vlan command is not properly unregistered when the network module is unloaded from memory. An attacker who can execute this command can force the system to access memory locations that are no longer valid. Successful exploitation leads directly to system instability, which can result in a complete crash and halt system availability(CVE-2025-54770)</p> <p>A use-after-free vulnerability has been identified in the GNU GRUB (Grand Unified Bootloader). The flaw occurs because the file-closing process incorrectly retains a memory pointer, leaving an invalid reference to a file system structure. An attacker could exploit this vulnerability to cause grub to crash, leading to a Denial of Service. Possible data integrity or confidentiality compromise is not discarded.(CVE-2025-54771)</p> <p>A vulnerability has been identified in the GRUB (Grand Unified Bootloader) component. This flaw occurs because the bootloader mishandles string conversion when reading information from a USB device, allowing an attacker to exploit inconsistent length values. A local attacker can connect a maliciously configured USB device during the…</p> https://cve.radiocsirt.org/vuln/oesa-2025-2735 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15749-1 <p>grub2-2.12-67.1 on GA media</p> <p>grub2-2.12-67.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15749-1 https://cve.radiocsirt.org/vuln/suse-su-2025:21062-1 <p>Security update for grub2</p> <p>Security update for grub2</p> https://cve.radiocsirt.org/vuln/suse-su-2025:21062-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-61663 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: grub2, Ubuntu:Pro:14.04:LTS: grub2-signed, Ubuntu:16.04:LTS: grub2-signed, Ubuntu:16.04:LTS: grub2-unsigned, Ubuntu:18.04:LTS: grub2-signed, Ubuntu:18.04:LTS: grub2-unsigned, Ubuntu:20.04:LTS: grub2-signed, Ubuntu:20.04:LTS: grub2-unsigned, Ubuntu:22.04:LTS: grub2-signed, Ubuntu:22.04:LTS: grub2-unsigned and 6 more</p> <p>A vulnerability has been identified in the GRUB2 bootloader&#39;s normal command that poses an immediate Denial of Service (DoS) risk. This flaw is a Use-after-Free issue, caused because the normal command is not properly unregistered when the module is unloaded. An attacker who can execute this command can force the system to access memory locations that are no longer valid. Successful exploitation leads directly to system instability, which can result in a complete crash and halt system availability. Impact on the data integrity and confidentiality is also not discarded.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: grub2, Ubuntu:Pro:14.04:LTS: grub2-signed, Ubuntu:16.04:LTS: grub2-signed, Ubuntu:16.04:LTS: grub2-unsigned, Ubuntu:18.04:LTS: grub2-signed, Ubuntu:18.04:LTS: grub2-unsigned, Ubuntu:20.04:LTS: grub2-signed, Ubuntu:20.04:LTS: grub2-unsigned, Ubuntu:22.04:LTS: grub2-signed, Ubuntu:22.04:LTS: grub2-unsigned and 6 more</p> <p>A vulnerability has been identified in the GRUB2 bootloader&#39;s normal command that poses an immediate Denial of Service (DoS) risk. This flaw is a Use-after-Free issue, caused because the normal command is not properly unregistered when the module is unloaded. An attacker who can execute this command can force the system to access memory locations that are no longer valid. Successful exploitation leads directly to system instability, which can result in a complete crash and halt system availability. Impact on the data integrity and confidentiality is also not discarded.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-61663 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2638 <p>Ein Angreifer kann mehrere Schwachstellen in Grub ausnutzen, um beliebigen Programmcode auszuführen, und um einen Denial of Service Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Grub ausnutzen, um beliebigen Programmcode auszuführen, und um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2638