Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2025-61664

Опубликовано: 21 нояб. 2025
Источник: msrc
CVSS3: 4.9
EPSS Низкий

Описание

Grub2: missing unregister call for normal_exit command may lead to use-after-free

EPSS

Процентиль: 4%
0.00018
Низкий

4.9 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.9
ubuntu
3 месяца назад

A vulnerability in the GRUB2 bootloader has been identified in the normal module. This flaw, a memory Use After Free issue, occurs because the normal_exit command is not properly unregistered when its related module is unloaded. An attacker can exploit this condition by invoking the command after the module has been removed, causing the system to improperly access a previously freed memory location. This leads to a system crash or possible impacts in data confidentiality and integrity.

CVSS3: 4.9
nvd
3 месяца назад

A vulnerability in the GRUB2 bootloader has been identified in the normal module. This flaw, a memory Use After Free issue, occurs because the normal_exit command is not properly unregistered when its related module is unloaded. An attacker can exploit this condition by invoking the command after the module has been removed, causing the system to improperly access a previously freed memory location. This leads to a system crash or possible impacts in data confidentiality and integrity.

CVSS3: 4.9
debian
3 месяца назад

A vulnerability in the GRUB2 bootloader has been identified in the nor ...

CVSS3: 4.9
github
3 месяца назад

A vulnerability in the GRUB2 bootloader has been identified in the normal module. This flaw, a memory Use After Free issue, occurs because the normal_exit command is not properly unregistered when its related module is unloaded. An attacker can exploit this condition by invoking the command after the module has been removed, causing the system to improperly access a previously freed memory location. This leads to a system crash or possible impacts in data confidentiality and integrity.

CVSS3: 4.9
fstec
3 месяца назад

Уязвимость функции normal_exit() загрузчика операционных систем Grub2, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 4%
0.00018
Низкий

4.9 Medium

CVSS3