CVE-2025-61664: gnu grub2 Expired Pointer Dereference
Vulnerability summary
CVE-2025-61664 is a medium (CVSS 4.9) Expired Pointer Dereference vulnerability in gnu grub2. EPSS estimates a 0.14% chance of exploitation in the next 30 days, higher than 3% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 11 · Related 11Timeline
- 18-11-2025PublishedVulnerability first disclosed.
- 01-09-2026Last modifiedVulnerability information updated.
Description
A vulnerability in the GRUB2 bootloader has been identified in the normal module. This flaw, a memory Use After Free issue, occurs because the normal_exit command is not properly unregistered when its related module is unloaded. An attacker can exploit this condition by invoking the command after the module has been removed, causing the system to improperly access a previously freed memory location. This leads to a system crash or possible impacts in data confidentiality and integrity.
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated4.9MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
- OSV · DebianEcosystem advisory · calculated4.9MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
- NVDNIST4.9MediumCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
EPSS trend
Probability
0.14%
Chance of exploitation in the next 30 days
Percentile
3%
Versus all other CVEs
30-day change
0.00 pp
From 0.14% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu3 products
- grub2All versions (No fix recorded)
- grub2-signedAll versions (No fix recorded)
- grub2-unsignedAll versions (No fix recorded)
Debian1 product
- grub2All versions (No fix recorded) | < 2.14-1
Gnu1 product
- grub2≤ 2.14
3 vendors · 5 products
