Red Hat Grub2 HFS+ Filesystem Driver NULL Pointer Dereference Vulnerability

A vulnerability exists in the Grub2 bootloader package in Red Hat Enterprise Linux 9. When the HFS+ filesystem driver fails to mount, it does not correctly set the ERRNO value, potentially leading to a NULL pointer dereference. This flaw could cause a crash or an unexpected exit during operation.

Impact

Exploitation of this vulnerability can cause a denial-of-service condition by crashing the system or terminating the current operation.

Remediation

Users can apply the available update for this vulnerability through the Red Hat Enterprise Linux 9 Security Advisory RHSA-2025:6990.