Debian Based Gnu Grub vulnerabilities

1 known vulnerability affecting debian/debian_based_gnu_grub.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2024-2312MEDIUMCVSS 6.7fixed in 2.12-1ubuntu52024-04-05

CVE-2024-2312 [MEDIUM] CWE-416 CVE-2024-2312: GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 modu GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead to a use-after-free condition, and could possibly lead to secure boot bypass.