Use-After-Free Vulnerability in GRUB's gettext Module by Red Hat
CVE-2025-61662

7.8HIGH

Key Information:

Vendor

Gnu
Status
Grub2
Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 8
Vendor
CVE Published:
18 November 2025

What is CVE-2025-61662?

A Use-After-Free vulnerability in the gettext module of GRUB has been identified, resulting from a programming flaw that allows the gettext command to persist in memory after its module has been unloaded. This vulnerability can be exploited by an attacker to invoke the orphaned command, leading to access of invalid memory locations. Such exploitation can result in application crashes, potentially resulting in Denial of Service conditions. While direct data compromise is not guaranteed, the integrity and confidentiality of the system may still be at risk due to the instability introduced by this flaw.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

grub2 0 <= 2.14

References

https://access.redhat.com/security/cve/CVE-2025-61662
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2414683
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.