Back Linuxsecurity

openSUSE: grub2 Moderate Multiple Issues Vuln 2025:4143

Linuxsecurity •LinuxSecurity Advisories • November 20, 2025

This update for grub2 fixes the following issues: * CVE-2025-54771: Fixed rub_file_close() does not properly controls the fs refcount (bsc#1252931) * CVE-2025-61661: Fixed out-of-bounds write in grub_usb_get_string() function (bsc#1252932) * CVE-2025-61662: Fixed missing unregister call for gettext command may lead to use-after-free (bsc#1252933) * CVE-2025-61663: Fixed missing unregister call for normal commands may lead to use-after-free (bsc#1252934) * CVE-2025-61664: Fixed missing unregister call for normal_exit command may lead to use-after-free (bsc#1252935) Other fixes: * Bump upstream SBAT generation to 6

## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2025-4143=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-4143=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-4143=1

* openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64 i586) * grub2-2.04-150300.22.61.1 * grub2-branding-upstream-2.04-150300.22.61.1 * grub2-debuginfo-2.04-150300.22.61.1 * openSUSE Leap 15.3 (aarch64 s390x x86_64 i586) * grub2-debugsource-2.04-150300.22.61.1 * openSUSE Leap 15.3 (noarch) * grub2-systemd-sleep-plugin-2.04-150300.22.61.1 * grub2-i386-xen-2.04-150300.22.61.1 * grub2-powerpc-ieee1275-debug-2.04-150300.22.61.1 * grub2-i386-pc-2.04-150300.22.61.1 * grub2-snapper-plugin-2.04-150300.22.61.1 * grub2-x86_64-efi-debug-2.04-150300.22.61.1 * grub2-i386-efi-debug-2.04-150300.22.61.1 * grub2-i386-pc-extras-2.04-150300.22.61.1 * grub2-i386-efi-extras-2.04-150300.22.61.1 * grub2-powerpc-ieee1275-2.04-150300.22.61.1 * grub2-s390x-emu-extras-2.04-150300.22.61.1 * grub2-i386-efi-2.04-150300.22.61.1 * grub2-x86_64-efi-2.04-150300.22.61.1 * grub2-powerpc-ieee1275-extras-2.04-150300.22.61.1 * grub2-x86_64-xen-extras-2.04-150300.22.61.1 * grub2-x86_64-xen-2.04-150300.22.61.1 * grub2-arm64-efi-debug-2.04-150300.22.61.1 * grub2-x86_64-efi-extras-2.04-150300.22.61.1 * grub2-arm64-efi-2.04-150300.22.61.1 * grub2-i386-xen-extras-2.04-150300.22.61.1 * grub2-arm64-efi-extras-2.04-150300.22.61.1 * grub2-i386-pc-debug-2.04-150300.22.61.1 * openSUSE Leap 15.3 (s390x) * grub2-s390x-emu-debug-2.04-150300.22.61.1 * grub2-s390x-emu-2.04-150300.22.61.1 * SUSE Linux Enterprise Micro 5.2 (aarch64 s390x x86_64) * grub2-2.04-150300.22.61.1 * grub2-debuginfo-2.04-150300.22.61.1 * grub2-debugsource-2.04-150300.22.61.1 * SUSE Linux Enterprise Micro 5.2 (noarch) * grub2-x86_64-efi-2.04-150300.22.61.1 * grub2-arm64-efi-2.04-150300.22.61.1 * grub2-x86_64-xen-2.04-150300.22.61.1 * grub2-i386-pc-2.04-150300.22.61.1 * grub2-snapper-plugin-2.04-150300.22.61.1 * SUSE Linux Enterprise Micro 5.2 (s390x) * grub2-s390x-emu-2.04-150300.22.61.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (aarch64 s390x x86_64) * grub2-2.04-150300.22.61.1 * grub2-debuginfo-2.04-150300.22.61.1 * grub2-debugsource-2.04-150300.22.61.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (noarch) * grub2-x86_64-efi-2.04-150300.22.61.1 * grub2-arm64-efi-2.04-150300.22.61.1 * grub2-x86_64-xen-2.04-150300.22.61.1 * grub2-i386-pc-2.04-150300.22.61.1 * grub2-snapper-plugin-2.04-150300.22.61.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (s390x) * grub2-s390x-emu-2.04-150300.22.61.1

* bsc#1252931 * bsc#1252932 * bsc#1252933 * bsc#1252934 * bsc#1252935 ## References: * * * * * * * * * *

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SUSE and openSUSE Address Moderate grub2 Vulnerabilities SUSE and openSUSE have released updates for grub2 to address multiple vulnerabilities, including use-after-free and out-of-bounds write issues. The updates fix specific CVEs, including CVE-2025-54771 and CVE-2025-61661, which could potentially affect system stability and security. 46 sources 44

Extracted Entities

openSUSE: grub2 Moderate Multiple Issues Vuln 2025:4143

The full story

Extracted Entities

Companies (1)

CVEs (5)

Platforms (4)