CVE-2025-0624: grub2 Out-of-bounds Write
Vulnerability summary
CVE-2025-0624 is a high (CVSS 7.6) Out-of-bounds Write vulnerability in grub2. EPSS estimates a 1.41% chance of exploitation in the next 30 days, higher than 72.1% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 9 · Related 9Timeline
- 19-02-2025PublishedVulnerability first disclosed.
- 13-10-2026Last modifiedVulnerability information updated.
Description
A flaw was found in grub2. During the network boot process, when trying to search for the configuration file, grub copies data from a user controlled environment variable into an internal buffer using the grub_strcpy() function. During this step, it fails to consider the environment variable length when allocating the internal buffer, resulting in an out-of-bounds write. If correctly exploited, this issue may result in remote code execution through the same network segment grub is searching for the boot information, which can be used to by-pass secure boot protections.
CVSS metrics
5 scores · 5 sources · 1 version- OSV · Red hatEcosystem advisory · calculated7.6HighCVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated7.6HighCVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.6HighCVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
- NVDNIST7.6HighCVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS trend
Probability
1.41%
Chance of exploitation in the next 30 days
Percentile
72%
Versus all other CVEs
30-day change
0.00 pp
From 1.41% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Redhat29 products
- grub2< 1:2.02-152.el8_8.2 | < 1:2.02-123.el8_6.18 | < 1:2.02-99.el8_4.12 | < 1:2.06-86.el9_4.2 | < 1:2.02-87.el8_2.13 | < 1:2.06-27.el9_0.22 | < 1:2.06-94.el9_5 | < 1:2.06-61.el9_2.10 | < 1:2.02-162.el8_10 | < 1:2.02-0.87.el7_9.15
- grub2-common< 1:2.02-152.el8_8.2 | < 1:2.02-123.el8_6.18 | < 1:2.02-99.el8_4.12 | < 1:2.06-86.el9_4.2 | < 1:2.02-87.el8_2.13 | < 1:2.06-27.el9_0.22 | < 1:2.06-94.el9_5 | < 1:2.06-61.el9_2.10 | < 1:2.02-162.el8_10 | < 1:2.02-0.87.el7_9.15
- grub2-debuginfo< 1:2.02-152.el8_8.2 | < 1:2.02-123.el8_6.18 | < 1:2.02-99.el8_4.12 | < 1:2.06-86.el9_4.2 | < 1:2.02-87.el8_2.13 | < 1:2.06-27.el9_0.22 | < 1:2.06-94.el9_5 | < 1:2.06-61.el9_2.10 | < 1:2.02-162.el8_10 | < 1:2.02-0.87.el7_9.15
- grub2-debugsource< 1:2.02-152.el8_8.2 | < 1:2.02-123.el8_6.18 | < 1:2.02-99.el8_4.12 | < 1:2.06-86.el9_4.2 | < 1:2.02-87.el8_2.13 | < 1:2.06-27.el9_0.22 | < 1:2.06-94.el9_5 | < 1:2.06-61.el9_2.10 | < 1:2.02-162.el8_10
- grub2-efi-aa64< 1:2.02-152.el8_8.2 | < 1:2.02-123.el8_6.18 | < 1:2.06-86.el9_4.2 | < 1:2.06-27.el9_0.22 | < 1:2.06-94.el9_5 | < 1:2.06-61.el9_2.10 | < 1:2.02-162.el8_10
Ubuntu3 products
- grub2All versions (No fix recorded)
- grub2-signedAll versions (No fix recorded)
- grub2-unsignedAll versions (No fix recorded)
Debian1 product
- grub2< 2.06-13+deb12u2 | < 2.12-6
3 vendors · 33 products
