REDHAT-BUG-2345640: Medium severity GNU GRUB2 vulnerability
Published Feb 13, 2025
·Updated
There's a stack overflow when reading a BFS file system. A crafted BFS filesystem may lead to a uncontrolled loop causing grub2 to crash.
Affected Software
1 affected component
GNU GRUB2
Event History
Feb 13, 2025
Data Sourced
via Red Hat·10:32 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-2345640?
The severity of REDHAT-BUG-2345640 is critical due to the potential for a stack overflow and system crash.
2
How do I fix REDHAT-BUG-2345640?
To fix REDHAT-BUG-2345640, you should update to the latest patch version of GRUB2 as provided by your Linux distribution.
3
What systems are affected by REDHAT-BUG-2345640?
REDHAT-BUG-2345640 affects systems running the GNU GRUB2 software, particularly on CentOS and related distributions.
4
What type of vulnerability is REDHAT-BUG-2345640?
REDHAT-BUG-2345640 is a stack overflow vulnerability that can cause an uncontrolled loop leading to grub2 crashing.
5
Are there any known exploits for REDHAT-BUG-2345640?
As of now, there are no confirmed exploits in the wild for REDHAT-BUG-2345640, but it is categorized as a serious risk.