Skip to content
openSUSE: grub2 Important Update CVE-2024-56738 DoS 2025:20163

openSUSE: grub2 Important Update CVE-2024-56738 DoS 2025:20163

Linuxsecurity •LinuxSecurity Advisories • December 17, 2025

This update for grub2 fixes the following issues: Changes in grub2: - CVE-2025-54771: Fixed grub_file_close() does not properly controls the fs refcount (bsc#1252931) - CVE-2025-54770: Fixed missing unregister call for net_set_vlan command may lead to use-after-free (bsc#1252930) - CVE-2025-61662: Fixed missing unregister call for gettext command may lead to use-after-free (bsc#1252933) - CVE-2025-61663: Fixed missing unregister call for normal commands may lead to use-after-free (bsc#1252934) - CVE-2025-61664: Fixed missing unregister call for normal_exit command may lead to use-after-free (bsc#1252935) - CVE-2025-61661: Fixed out-of-bounds write in grub_usb_get_string() function (bsc#1252932) - Bump upstream SBAT generation to 6 - Fix "sparse file not allowed" error after grub2-reboot (bsc#1245738) - Fix PowerPC network boot prefix to correctly locate grub.cfg (bsc#1249385) - turn off page flipping for i386-pc using VBE video backend (bsc#1245636) - Fix boot hangs in setting up

- openSUSE Leap 16.0: grub2-2.12-160000.3.1 grub2-arm64-efi-2.12-160000.3.1 grub2-arm64-efi-bls-2.12-160000.3.1 grub2-arm64-efi-debug-2.12-160000.3.1 grub2-arm64-efi-extras-2.12-160000.3.1 grub2-branding-upstream-2.12-160000.3.1 grub2-common-2.12-160000.3.1 grub2-i386-pc-2.12-160000.3.1 grub2-i386-pc-debug-2.12-160000.3.1 grub2-i386-pc-extras-2.12-160000.3.1 grub2-powerpc-ieee1275-2.12-160000.3.1 grub2-powerpc-ieee1275-debug-2.12-160000.3.1 grub2-powerpc-ieee1275-extras-2.12-160000.3.1 grub2-s390x-emu-2.12-160000.3.1 grub2-s390x-emu-debug-2.12-160000.3.1 grub2-s390x-emu-extras-2.12-160000.3.1 grub2-snapper-plugin-2.12-160000.3.1 grub2-systemd-sleep-plugin-2.12-160000.3.1 grub2-x86_64-efi-2.12-160000.3.1 grub2-x86_64-efi-bls-2.12-160000.3.1 grub2-x86_64-efi-debug-2.12-160000.3.1 grub2-x86_64-efi-extras-2.12-160000.3.1 grub2-x86_64-xen-2.12-160000.3.1 grub2-x86_64-xen-debug-2.12-160000.3.1 grub2-x86_64-xen-extras-2.12-160000.3.1

- openSUSE Leap 16.0:

grub2-2.12-160000.3.1

grub2-arm64-efi-2.12-160000.3.1

grub2-arm64-efi-bls-2.12-160000.3.1

grub2-arm64-efi-debug-2.12-160000.3.1

grub2-arm64-efi-extras-2.12-160000.3.1

grub2-branding-upstream-2.12-160000.3.1

grub2-common-2.12-160000.3.1

grub2-i386-pc-2.12-160000.3.1

grub2-i386-pc-debug-2.12-160000.3.1

grub2-i386-pc-extras-2.12-160000.3.1

grub2-powerpc-ieee1275-2.12-160000.3.1

grub2-powerpc-ieee1275-debug-2.12-160000.3.1

grub2-powerpc-ieee1275-extras-2.12-160000.3.1

grub2-s390x-emu-2.12-160000.3.1

grub2-s390x-emu-debug-2.12-160000.3.1

grub2-s390x-emu-extras-2.12-160000.3.1

grub2-snapper-plugin-2.12-160000.3.1

grub2-systemd-sleep-plugin-2.12-160000.3.1

grub2-x86_64-efi-2.12-160000.3.1

grub2-x86_64-efi-bls-2.12-160000.3.1

grub2-x86_64-efi-debug-2.12-160000.3.1

grub2-x86_64-efi-extras-2.12-160000.3.1

grub2-x86_64-xen-2.12-160000.3.1

grub2-x86_64-xen-debug-2.12-160000.3.1

grub2-x86_64-xen-extras-2.12-160000.3.1

* bsc#1234959 * bsc#1245636 * bsc#1245738 * bsc#1245953 * bsc#1246231 * bsc#1247242 * bsc#1249088 * bsc#1249385 * bsc#1252930 * bsc#1252931 * bsc#1252932 * bsc#1252933 * bsc#1252934 * bsc#1252935 References: * * * * * * *

*

*

*

*

*

*

*