CVE-2025-4382

Name of the Vulnerable Software and Affected Versions GRUB versions (affected versions not specified)

Description A flaw in systems using LUKS-encrypted disks with GRUB configured for TPM-based auto-decryption may allow an attacker with physical access to access unencrypted data without further authentication. This occurs when GRUB fails to locate a valid filesystem and enters rescue mode after the underlying filesystem superblock is corrupted, leaving the decryption key loaded in system memory. This scenario compromises data confidentiality and also presents a data integrity concern.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.