What’s Vulnerable › Vulnerabilities

CVE-2025-54771: Grub2: use-after-free in grub_file_close()

• Severity: medium (CVSS 4.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-11-18 · updated 2026-10-18
• Weakness: CWE-825

Description

A use-after-free vulnerability has been identified in the GNU GRUB (Grand Unified Bootloader). The flaw occurs because the file-closing process incorrectly retains a memory pointer, leaving an invalid reference to a file system structure. An attacker could exploit this vulnerability to cause grub to crash, leading to a Denial of Service. Possible data integrity or confidentiality compromise is not discarded.

Affected products

• grub2: through 2.14
• Red Hat OpenShift Container Platform 4.18: all versions
• Red Hat Enterprise Linux 10: all versions
• Red Hat Enterprise Linux 7: all versions
• Red Hat Enterprise Linux 8: all versions
• Red Hat Enterprise Linux 9: all versions

References

• https://access.redhat.com/security/cve/CVE-2025-54771
• https://bugzilla.redhat.com/show_bug.cgi?id=2413823
• https://lists.gnu.org/archive/html/grub-devel/2025-11/msg00155.html
• http://www.openwall.com/lists/oss-security/2025/11/18/3

Get alerted when CVE-2025-54771 or the next vulnerability affects your stack