CVE-2024-2312

概要

参考情報

• bugs.launchpad.net/ubuntu/+source/grub2-unsigned/+bug/2054127 · Exploit
• cve.mitre.org/cgi-bin/cvename.cgi · Third Party Advisory
• security.netapp.com/advisory/ntap-20240426-0003 · Third Party Advisory

grub2 のその他の脆弱性

• CVE-2025-61662高 7.8A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a programming error where the gettext comm…
• CVE-2025-0686中 6.4A flaw was found in grub2. When performing a symlink lookup from a romfs filesystem, grub's romfs filesystem module uses user-controlled par…
• CVE-2025-0685中 6.4A flaw was found in grub2. When reading data from a jfs filesystem, grub's jfs filesystem module uses user-controlled parameters from the fi…
• CVE-2025-0684中 6.4A flaw was found in grub2. When performing a symlink lookup from a reiserfs filesystem, grub's reiserfs fs module uses user-controlled param…
• CVE-2025-0678高 7.8A flaw was found in grub2. When reading data from a squash4 filesystem, grub's squash4 fs module uses user-controlled parameters from the fi…