CVE-2025-61663

Name of the Vulnerable Software and Affected Versions GRUB2 Bootloader (affected versions not specified)

Description A Use-after-Free issue exists in the GRUB2 bootloader’s normal command. The flaw occurs because the normal command is not properly unregistered when the module is unloaded. An attacker executing this command can cause the system to access invalid memory locations, leading to system instability and a potential Denial of Service (DoS). This could result in a complete system crash and halt system availability. The potential impact on data integrity and confidentiality is also considered possible.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.