Memory Allocation Flaw in Grub2 Affects Red Hat Products

CVE-2024-45775

Summary

A memory allocation flaw has been identified in Grub2, specifically in the grub_extcmd_dispatcher() function. This flaw arises when grub_arg_list_alloc() is invoked for memory allocation without adequate checks for allocation failure. In instances where memory allocation does not succeed, the resulting NULL pointer is processed by the parse_option() function, potentially leading to system crashes or, in rare cases, corruption of the Interrupt Vector Table (IVT) data. This vulnerability emphasizes the necessity for proper memory management and error handling in critical system components.

References