Back Linuxsecurity openSUSE: grub2 Important Update CVE-2024-56738 DoS 2025:20163
This update for grub2 fixes the following issues: Changes in grub2: - CVE-2025-54771: Fixed grub_file_close() does not properly controls the fs refcount (bsc#1252931) - CVE-2025-54770: Fixed missing unregister call for net_set_vlan command may lead to use-after-free (bsc#1252930) - CVE-2025-61662: Fixed missing unregister call for gettext command may lead to use-after-free (bsc#1252933) - CVE-2025-61663: Fixed missing unregister call for normal commands may lead to use-after-free (bsc#1252934) - CVE-2025-61664: Fixed missing unregister call for normal_exit command may lead to use-after-free (bsc#1252935) - CVE-2025-61661: Fixed out-of-bounds write in grub_usb_get_string() function (bsc#1252932) - Bump upstream SBAT generation to 6 - Fix "sparse file not allowed" error after grub2-reboot (bsc#1245738) - Fix PowerPC network boot prefix to correctly locate grub.cfg (bsc#1249385) - turn off page flipping for i386-pc using VBE video backend (bsc#1245636) - Fix boot hangs in setting up
- openSUSE Leap 16.0: grub2-2.12-160000.3.1 grub2-arm64-efi-2.12-160000.3.1 grub2-arm64-efi-bls-2.12-160000.3.1 grub2-arm64-efi-debug-2.12-160000.3.1 grub2-arm64-efi-extras-2.12-160000.3.1 grub2-branding-upstream-2.12-160000.3.1 grub2-common-2.12-160000.3.1 grub2-i386-pc-2.12-160000.3.1 grub2-i386-pc-debug-2.12-160000.3.1 grub2-i386-pc-extras-2.12-160000.3.1 grub2-powerpc-ieee1275-2.12-160000.3.1 grub2-powerpc-ieee1275-debug-2.12-160000.3.1 grub2-powerpc-ieee1275-extras-2.12-160000.3.1 grub2-s390x-emu-2.12-160000.3.1 grub2-s390x-emu-debug-2.12-160000.3.1 grub2-s390x-emu-extras-2.12-160000.3.1 grub2-snapper-plugin-2.12-160000.3.1 grub2-systemd-sleep-plugin-2.12-160000.3.1 grub2-x86_64-efi-2.12-160000.3.1 grub2-x86_64-efi-bls-2.12-160000.3.1 grub2-x86_64-efi-debug-2.12-160000.3.1 grub2-x86_64-efi-extras-2.12-160000.3.1 grub2-x86_64-xen-2.12-160000.3.1 grub2-x86_64-xen-debug-2.12-160000.3.1 grub2-x86_64-xen-extras-2.12-160000.3.1
- openSUSE Leap 16.0:
grub2-2.12-160000.3.1
grub2-arm64-efi-2.12-160000.3.1
grub2-arm64-efi-bls-2.12-160000.3.1
grub2-arm64-efi-debug-2.12-160000.3.1
grub2-arm64-efi-extras-2.12-160000.3.1
grub2-branding-upstream-2.12-160000.3.1
grub2-common-2.12-160000.3.1
grub2-i386-pc-2.12-160000.3.1
grub2-i386-pc-debug-2.12-160000.3.1
grub2-i386-pc-extras-2.12-160000.3.1
grub2-powerpc-ieee1275-2.12-160000.3.1
grub2-powerpc-ieee1275-debug-2.12-160000.3.1
grub2-powerpc-ieee1275-extras-2.12-160000.3.1
grub2-s390x-emu-2.12-160000.3.1
grub2-s390x-emu-debug-2.12-160000.3.1
grub2-s390x-emu-extras-2.12-160000.3.1
grub2-snapper-plugin-2.12-160000.3.1
grub2-systemd-sleep-plugin-2.12-160000.3.1
grub2-x86_64-efi-2.12-160000.3.1
grub2-x86_64-efi-bls-2.12-160000.3.1
grub2-x86_64-efi-debug-2.12-160000.3.1
grub2-x86_64-efi-extras-2.12-160000.3.1
grub2-x86_64-xen-2.12-160000.3.1
grub2-x86_64-xen-debug-2.12-160000.3.1
grub2-x86_64-xen-extras-2.12-160000.3.1
* bsc#1234959 * bsc#1245636 * bsc#1245738 * bsc#1245953 * bsc#1246231 * bsc#1247242 * bsc#1249088 * bsc#1249385 * bsc#1252930 * bsc#1252931 * bsc#1252932 * bsc#1252933 * bsc#1252934 * bsc#1252935 References: * * * * * * *
*
*
*
*
*
*
*
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
