GRUB2 Bootloader Use-After-Free Vulnerability Leading to Denial-of-Service

A use-after-free vulnerability has been identified in the GRUB2 bootloader's normal command. This issue arises because the command is not properly unregistered when the module is unloaded, allowing an attacker to invoke the command and access invalid memory locations. Exploitation of this vulnerability causes system instability, potentially leading to a complete crash and loss of system availability. There are also concerns about possible impacts on data integrity and confidentiality.

Impact

Exploitation of this vulnerability causes a denial-of-service condition by crashing the system, disrupting normal operations, and halting system availability. Additionally, there are potential impacts on data integrity and confidentiality.