Debian Based GNU GRUB vulnerabilities

1 vulnerability

Known vulnerabilities in Debian Based GNU GRUB, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.7CVE-2024-2312debiangrub2+28
EPSS score
0.38%
GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead to a use-after-free condition, and could possibly lead to secure boot bypass.