CVEvulnerability

CVE-2025-1118

4.4 MEDIUM Published 2025-02-19 Modified 2026-10-21 Official page ↗
Status
Deferred
Published
2025-02-19
Last modified
2026-10-21
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.4 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-501

Description

A flaw was found in grub2. Grub's dump command is not blocked when grub is in lockdown mode, which allows the user to read any memory information, and an attacker may leverage this in order to extract signatures, salts, and other sensitive information from the memory.

Related

Weakness · CWE (1)

  • CWE-501 Trust Boundary Violation weakness

References