GRUB2 Heap-Based Buffer Overflow Vulnerability in UFS Filesystem Handling

A heap out-of-bounds write vulnerability has been identified in GRUB2 when it reads symbolic link names from a UFS filesystem. The issue arises because GRUB2 does not properly validate the length of the input string, leading to potential data integrity problems. This vulnerability could allow an attacker to bypass secure boot protections.

Impact

Exploitation of this vulnerability causes a heap-based buffer overflow, which can lead to memory corruption and the potential for arbitrary code execution.

Remediation

Users can apply the GRUB2 security update available for Red Hat Enterprise Linux 9. Instructions for applying this update can be found in the Red Hat Enterprise Linux 9 Release Notes.