GRUB Gettext Module Vulnerability

MEDIUM (4.9) No Patch (27 days)

Threat Intelligence

Low Risk
EPSS Score: 0.02% chance of exploitation (percentile: 3%)
🔍 Detection Tools: None available in major open-source tools
⚔️ Exploit Availability: No public exploits found

How we test →

What is it?

The GRUB (GNU GRand Unified Bootloader) is a boot loader used by Linux and other Unix-like operating systems. The gettext module in GRUB handles internationalization and localization. A Use-After-Free vulnerability has been discovered in this module, which can cause the application to access a memory location that is no longer valid. This can lead to a Denial of Service (DoS) or potentially more severe issues if an attacker exploits it.

Am I affected?

You're affected if you use GRUB versions 2.06 and earlier. To check if your system uses GRUB, run the command grub --version in your terminal.

Affected Products

GNU Project / GRUB

How to fix

To fix this vulnerability, update to a newer version of GRUB. You can download the latest version from the official GNU website: https://www.gnu.org/software/grub/. Alternatively, you can use the following command to upgrade your system:

sudo apt-get update && sudo apt-get install grub-updater

For RPM-based systems (e.g., Fedora):

sudo dnf update && sudo dnf install grub2

For Debian-based systems (e.g., Ubuntu):

sudo apt-get update && sudo apt-get install grub