The GRUB bootloader that loads and starts the Linux kernel when the node powers on.
Version: 2.14
Type: CLI
License:
| Expand | CVE | Title | Status | |
|---|---|---|---|---|
| CVE-2025-61662 Open CVE-2025-61662 in a new tab | A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a programming error where the gettext command remains registered in memory after its module is unloaded. An attacker can exploit this condition by invoking the orphaned command, causing the application to access a memory location that is no longer valid. An attacker could exploit this vulnerability to cause grub to crash, leading to a Denial of Service. Possible data integrity or confidentiality compromise is not discarded. | Not affected | High | |
| CVE-2024-56738 Open CVE-2024-56738 in a new tab | CVE-2024-56738 | Not affected | Unknown | |
| CVE-2025-4382 Open CVE-2025-4382 in a new tab | CVE-2025-4382 | Not affected | Unknown | |
| CVE-2025-54770 Open CVE-2025-54770 in a new tab | CVE-2025-54770 | Not affected | Unknown | |
| CVE-2025-54771 Open CVE-2025-54771 in a new tab | CVE-2025-54771 | Not affected | Unknown | |
| CVE-2025-61661 Open CVE-2025-61661 in a new tab | CVE-2025-61661 | Not affected | Unknown | |
| CVE-2025-61663 Open CVE-2025-61663 in a new tab | CVE-2025-61663 | Not affected | Unknown | |
| CVE-2025-61664 Open CVE-2025-61664 in a new tab | CVE-2025-61664 | Not affected | Unknown | |
| CVE-2026-97876 Open CVE-2026-97876 in a new tab | CVE-2026-97876 | Not affected | Unknown |
A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a programming error where the gettext command remains registered in memory after its module is unloaded. An attacker can exploit this condition by invoking the orphaned command, causing the application to access a memory location that is no longer valid. An attacker could exploit this vulnerability to cause grub to crash, leading to a Denial of Service. Possible data integrity or confidentiality compromise is not discarded.
CVE-2024-56738
CVE-2025-4382
CVE-2025-54770
CVE-2025-54771
CVE-2025-61661
CVE-2025-61663
CVE-2025-61664
CVE-2026-97876