Red Hat Grub2 Memory Allocation Vulnerability in Argument List Handling

A vulnerability exists in Grub2 where the 'grub_extcmd_dispatcher()' function allocates memory for the argument list but does not verify if the allocation was successful. This oversight can lead to a NULL pointer being processed by the 'parse_option()' function, causing Grub to crash or, in rare cases, corrupt the IVT data.

Impact

Exploitation of this vulnerability can cause Grub to crash or, in some rare scenarios, corrupt the IVT data.

Remediation

Users can apply the available update for Grub2 in Red Hat Enterprise Linux 9. For details on how to apply this update, refer to the Red Hat Enterprise Linux 9 Update Instructions.