Use-After-Free Vulnerability in GRUB's gettext Module by Red Hat
CVE-2025-61662

4.9MEDIUM

Key Information:

Vendor: Red Hat
Status: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9
Vendor: CVE Published:; 18 November 2025

What is CVE-2025-61662?

A Use-After-Free vulnerability in the gettext module of GRUB has been identified, resulting from a programming flaw that allows the gettext command to persist in memory after its module has been unloaded. This vulnerability can be exploited by an attacker to invoke the orphaned command, leading to access of invalid memory locations. Such exploitation can result in application crashes, potentially resulting in Denial of Service conditions. While direct data compromise is not guaranteed, the integrity and confidentiality of the system may still be at risk due to the instability introduced by this flaw.