Red Hat Grub2 Use-After-Free Vulnerability in Command GPG Module Allowing Arbitrary Code Execution

A use-after-free vulnerability has been identified in the Grub2 bootloader, specifically within the command/gpg module. This issue arises because hooks created by loaded modules are not always removed when the module is unloaded. An attacker can exploit this flaw by forcing Grub2 to execute the hooks after the corresponding module has been unloaded, leading to a use-after-free condition. If successfully exploited, this vulnerability could allow arbitrary code execution, potentially enabling the attacker to bypass secure boot protections. This vulnerability affects Red Hat Enterprise Linux 9 and is present in the Grub2 package.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution, allowing an attacker to bypass secure boot protections.

Remediation

Users can apply the available update for Grub2 in Red Hat Enterprise Linux 9, as detailed in the Red Hat Security Advisory RHSA-2025:6990.