PT-2025-6688

CVE-2024-45775

·

Published

2025-01-13

·

Updated

2026-10-21

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions grub2 (affected versions not specified)
Description A flaw was found in grub2 where the grub extcmd dispatcher() function calls grub arg list alloc() to allocate memory for the grub's argument list. However, it fails to check in case the memory allocation fails. Once the allocation fails, a NULL pointer will be processed by the parse option() function, leading grub to crash or, in some rare scenarios, corrupt the IVT data.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
ALSA-2025:6990
ALT-PU-2025-5587
ALT-PU-2025-6088
AZL-56937
AZL-57052
INFSA-2025_6990
OESA-2025-1216
OESA-2025-1217
OESA-2025-1218
OESA-2025-1291
OESA-2025-1292
OPENSUSE-SU-2025_0586-1
OPENSUSE-SU-2025_0587-1
OPENSUSE-SU-2025_0588-1
OPENSUSE-SU-2025_0607-1
OPENSUSE-SU-2025:14822-1
RHSA-2025:6990
RHSA-2025_6990
SUSE-SU-2025:01961-1
SUSE-SU-2025:0586-1
SUSE-SU-2025_0586-1
SUSE-SU-2025:0587-1
SUSE-SU-2025_0587-1
SUSE-SU-2025:0588-1
SUSE-SU-2025_0588-1
SUSE-SU-2025:0607-1
SUSE-SU-2025_0607-1
SUSE-SU-2025:0629-1
SUSE-SU-2025_0629-1
SUSE-SU-2025:20511-1
SUSE-SU-2025:20863-1
Found an issue in the description? Have something to add? Feel free to write us 👾