Buffer Overflow Vulnerability in GRUB2 JFS Filesystem Module by Red Hat

CVE-2025-0685

What is CVE-2025-0685?

A buffer overflow vulnerability exists in the JFS filesystem module of GRUB2. The module fails to properly validate user-controlled parameters when calculating the internal buffer size, which could trigger an integer overflow. This flaw may allow a maliciously crafted filesystem to cause the grub_jfs_lookup_symlink() function to write beyond the internal buffer limits during the grub_jfs_read_file() operation. The exploitation of this vulnerability can compromise critical internal data of GRUB, potentially enabling arbitrary code execution and bypassing secure boot mechanisms.

References