CVE-2025-0624: Grub2: net: out-of-bounds write in grub_net_search_config_file()
A flaw was found in grub2. During the network boot process, when trying to search for the configuration file, grub copies data from a user controlled environment variable into an internal buffer using the grubstrcpy() function. During this step, it fails to consider the environment variable length when allocating the internal buffer, resulting in an out-of-bounds write. If correctly exploited, this issue may result in remote code execution through the same network segment grub is searching for the boot information, which can be used to by-pass secure boot protections.
Other sources
During the network boot process when trying to search for the configuration file, grub copies data from a user controlled environment variable into an internal buffer using grubstrcpy() function. During this step it fails to consider the environment variable length when allocating the internal buffer, resulting in a out-of-bounds write. If correctly exploited this issue may result in remote code execution through the same network segment the grub is searching for the boot information, which can be used to by-pass secure boot protections.
— Red Hat
Grub2: net: out-of-bounds write in grubnetsearchconfigfile()
— Microsoft
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0624?
CVE-2025-0624 has been classified as a high severity vulnerability due to the potential for exploitation during the network boot process.
How do I fix CVE-2025-0624?
To fix CVE-2025-0624, update your GNU GRUB 2 to the latest version that addresses this vulnerability.
What type of vulnerability is CVE-2025-0624?
CVE-2025-0624 is a buffer overflow vulnerability caused by inadequate length checking on environment variables during the network boot process.
Who is affected by CVE-2025-0624?
CVE-2025-0624 affects all versions of GNU GRUB 2 that utilize the grub_strcpy() function during the boot configuration process.
What are the potential impacts of CVE-2025-0624?
The potential impacts of CVE-2025-0624 include arbitrary code execution, system compromise, or denial of service during network boot operations.