Memory Information Exposure in Grub2 by Red Hat

CVE-2025-1118

Summary

A flaw exists in Grub2's functionality where the dump command can be executed even in lockdown mode. This oversight allows attackers to access sensitive memory contents, such as cryptographic signatures and salts. By exploiting this vulnerability, users with the necessary privileges could extract confidential information, which poses a significant threat to the integrity and security of systems that rely on Grub2 for boot management.

References