High severity · published Nov 18, 2025
CVE-2025-61662
Grub2: missing unregister call for gettext command may lead to use-after-free
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a programming error where the gettext command remains registered in memory after its module is unloaded. An attacker can exploit this condition by invoking the orphaned command, causing the application to access a memory location that is no longer valid. An attacker could exploit this vulnerability to cause grub to crash, leading to a Denial of Service. Possible data integrity or confidentiality compromise is not discarded.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 12% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RH
Red Hat Enterprise Linux 10 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 10.0 Extended Update Support · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 7 Extended Lifecycle Support · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 8 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 8.2 Advanced Update Support · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 8.6 Telecommunications Update Service · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 8.8 Telecommunications Update Service · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions · Red Hat
All versions, or not specified · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-61662
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-61662
access.redhat.com
https://access.redhat.com/errata/RHSA-2026:10097
access.redhat.com
https://access.redhat.com/errata/RHSA-2026:14773
access.redhat.com
https://access.redhat.com/errata/RHSA-2026:15087
access.redhat.com
https://access.redhat.com/errata/RHSA-2026:17596
access.redhat.com
https://access.redhat.com/errata/RHSA-2026:4648
access.redhat.com
https://access.redhat.com/errata/RHSA-2026:4649
More from grub2
8.8
CVE-2024-56737
GNU GRUB (aka GRUB2) through 2.12 has a heap-based buffer overflow in fs/hfs.c via crafted sblock data in an HFS filesystem
8.6
CVE-2022-2601
A buffer overflow was found in grub_font_construct_glyph()
8.2
CVE-2021-20233
A flaw was found in grub2 in versions prior to 2.06
8.2
CVE-2020-25632
A flaw was found in grub2 in versions prior to 2.06
8.2
CVE-2020-10713
A flaw was found in grub2, prior to version 2.06
