The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:16154 advisory.

    The grub2 packages provide version 2 of the Grand Unified Boot Loader (GRUB), a highly configurable and     customizable boot loader with modular architecture. The packages support a variety of kernel formats, file     systems, computer architectures, and hardware devices.

    Security Fix(es):

    * grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write and Read. (CVE-2024-45776)

    * grub2: fs/ufs: OOB write in the heap (CVE-2024-45781)

    * grub2: command/gpg: Use-after-free due to hooks not being removed on module unload (CVE-2025-0622)

    * grub2: UFS: Integer overflow may lead to heap based out-of-bounds write when handling symlinks     (CVE-2025-0677)

    * grub2: commands/dump: The dump command is not in lockdown when secure boot is enabled (CVE-2025-1118)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:6990 advisory.

    * grub2: reader/jpeg: Heap OOB Write during JPEG parsing (CVE-2024-45774)

    * grub2: commands/extcmd: Missing check for failed allocation (CVE-2024-45775)

    * grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write and Read. (CVE-2024-45776)

    * grub2: fs/ufs: OOB write in the heap (CVE-2024-45781)

    * grub2: fs/hfs+: refcount can be decremented twice (CVE-2024-45783)

    * grub2: command/gpg: Use-after-free due to hooks not being removed on module unload (CVE-2025-0622)

    * grub2: UFS: Integer overflow may lead to heap based out-of-bounds write when handling symlinks     (CVE-2025-0677)

    * grub2: read: Integer overflow may lead to out-of-bounds write (CVE-2025-0690)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:16154 advisory.

    * grub2: grub-core/gettext: Integer overflow leads to Heap OOB Write and Read. (CVE-2024-45776)

    * grub2: fs/ufs: OOB write in the heap (CVE-2024-45781)

    * grub2: command/gpg: Use-after-free due to hooks not being removed on module unload (CVE-2025-0622)

    * grub2: UFS: Integer overflow may lead to heap based out-of-bounds write when handling symlinks     (CVE-2025-0677)

    * grub2: commands/dump: The dump command is not in lockdown when secure boot is enabled (CVE-2025-1118)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the grub2 package has been released.

ID	名稱	產品	系列	已發布	已更新	嚴重性
265398	RHEL 10 : grub2 (RHSA-2025:16154)	Nessus	Red Hat Local Security Checks	2025/9/18	2025/9/18	medium
266516	RockyLinux 9 : grub2 (RLSA-2025:6990)	Nessus	Rocky Linux Local Security Checks	2025/10/4	2025/10/4	medium
266659	RockyLinux 10 : grub2 (RLSA-2025:16154)	Nessus	Rocky Linux Local Security Checks	2025/10/6	2025/10/6	medium
261147	Photon OS 4.0: Grub2 PHSA-2025-4.0-0861	Nessus	PhotonOS Local Security Checks	2025/9/3	2025/9/3	high

偵測

搜尋 Plugin

medium

medium

medium

high