CVE-2025-0624
Description
RHSA-2025:3367: grub2 security update (Important)
Predictions
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Mitigation details
Description grub2: net: Out-of-bounds write in grub_net_search_config_file() Red Hat statement Red Hat Product Security team has rated this vulnerability as Important, as an attacker that has access to the same network segment is able to exploit it once netboot is enabled in grub2. CVSS v3: 7.6 (CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Errata / fixed releases ProductPackageAdvisoryReleased…
Description
grub2: net: Out-of-bounds write in grub_net_search_config_file()
Red Hat statement
Red Hat Product Security team has rated this vulnerability as Important, as an attacker that has access to the same network segment is able to exploit it once netboot is enabled in grub2.
CVSS v3: 7.6 (CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)
Errata / fixed releases
| Product | Package | Advisory | Released |
|---|---|---|---|
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | grub2-1:2.02-0.87.el7_9.15 | RHSA-2025:3396 | 2025-03-31T00:00:00Z |
| Red Hat Enterprise Linux 8 | grub2-1:2.02-162.el8_10 | RHSA-2025:3367 | 2025-03-27T00:00:00Z |
| Red Hat Enterprise Linux 8.2 Advanced Update Support | grub2-1:2.02-87.el8_2.13 | RHSA-2025:2784 | 2025-03-13T00:00:00Z |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | grub2-1:2.02-99.el8_4.12 | RHSA-2025:2655 | 2025-03-11T00:00:00Z |
| Red Hat Enterprise Linux 8.4 Telecommunications Update Service | grub2-1:2.02-99.el8_4.12 | RHSA-2025:2655 | 2025-03-11T00:00:00Z |
| Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | grub2-1:2.02-99.el8_4.12 | RHSA-2025:2655 | 2025-03-11T00:00:00Z |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | grub2-1:2.02-123.el8_6.18 | RHSA-2025:2653 | 2025-03-11T00:00:00Z |
| Red Hat Enterprise Linux 8.6 Telecommunications Update Service | grub2-1:2.02-123.el8_6.18 | RHSA-2025:2653 | 2025-03-11T00:00:00Z |
| Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | grub2-1:2.02-123.el8_6.18 | RHSA-2025:2653 | 2025-03-11T00:00:00Z |
| Red Hat Enterprise Linux 8.8 Extended Update Support | grub2-1:2.02-152.el8_8.2 | RHSA-2025:2521 | 2025-03-10T00:00:00Z |
| Red Hat Enterprise Linux 9 | grub2-1:2.06-94.el9_5 | RHSA-2025:2867 | 2025-03-17T00:00:00Z |
| Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | grub2-1:2.06-27.el9_0.22 | RHSA-2025:2799 | 2025-03-13T00:00:00Z |
| Red Hat Enterprise Linux 9.2 Extended Update Support | grub2-1:2.06-61.el9_2.10 | RHSA-2025:2869 | 2025-03-17T00:00:00Z |
| Red Hat Enterprise Linux 9.4 Extended Update Support | grub2-1:2.06-86.el9_4.2 | RHSA-2025:2675 | 2025-03-12T00:00:00Z |
| Red Hat OpenShift Container Platform 4.12 | rhcos-412.86.202503310142-0 | RHSA-2025:3573 | 2025-04-10T00:00:00Z |
| Red Hat OpenShift Container Platform 4.13 | rhcos-413.92.202504070146-0 | RHSA-2025:3780 | 2025-04-17T00:00:00Z |
| Red Hat OpenShift Container Platform 4.14 | rhcos-414.92.202505141057-0 | RHSA-2025:7702 | 2025-05-21T00:00:00Z |
| Red Hat OpenShift Container Platform 4.15 | rhcos-415.92.202504282058-0 | RHSA-2025:4422 | 2025-05-08T00:00:00Z |
| Red Hat OpenShift Container Platform 4.16 | rhcos-416.94.202503252048-0 | RHSA-2025:3301 | 2025-04-03T00:00:00Z |
| Red Hat OpenShift Container Platform 4.17 | rhcos-417.94.202503241418-0 | RHSA-2025:3297 | 2025-04-03T00:00:00Z |
| Red Hat OpenShift Container Platform 4.18 | rhcos-418.94.202504021150-0 | RHSA-2025:3577 | 2025-04-10T00:00:00Z |
Package state
| Product | Package | State |
|---|---|---|
| Red Hat Enterprise Linux 10 | grub2 | Not affected |
Apply commands
yum update -y grub2
# or:
dnf upgrade -y grub2Affected
| Vendor | Product | Version |
|---|---|---|
| redhat | Red Hat Enterprise Linux 10 | Not affected |
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| rhel | 9 | fixed | |
| debian | bookworm | fixed | 2.06-13+deb12u2 |
| debian | bullseye | affected | |
| debian | forky | fixed | 2.12-6 |
| debian | sid | fixed | 2.12-6 |
| debian | trixie | fixed | 2.12-6 |
| sles | affected | | |
| rocky | 9 | fixed | |
| rhel | 8 | fixed | |
References
- https://access.redhat.com/errata/RHSA-2025:2867
- https://security-tracker.debian.org/tracker/CVE-2025-0624
- https://www.suse.com/security/cve/CVE-2025-0624.html
- https://errata.rockylinux.org/RLSA-2025:2867
- https://access.redhat.com/errata/RHSA-2025:3367
- https://bugzilla.redhat.com/2346112
- https://errata.almalinux.org/8/ALSA-2025-3367.html
- https://errata.almalinux.org/9/ALSA-2025-2867.html
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.