Integer Overflow Vulnerability in GRUB2 Affects Linux Boot Processes

CVE-2025-0686

What is CVE-2025-0686?

A security vulnerability in the GRUB2 boot loader allows for improper handling of user-controlled parameters during symlink lookups within a romfs filesystem. This flaw stems from inadequate checks for integer overflows, leading to potentially unsafe buffer size calculations. When exploited, a maliciously crafted filesystem can trigger out-of-bounds writes, which in turn may result in corruption of GRUB's critical internal data. This issue poses a significant risk, as it could allow an attacker to execute arbitrary code, potentially circumventing secure boot protections.

References