CVE-2025-54771

{
  "id": "CVE-2025-54771",
  "sourceIdentifier": "[email protected]",
  "published": "2025-11-18T19:15:49.420",
  "lastModified": "2026-11-05T16:17:20.267",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A use-after-free vulnerability has been identified in the GNU GRUB (Grand Unified Bootloader). The flaw occurs because the file-closing process incorrectly retains a memory pointer, leaving an invalid reference to a file system structure. An attacker could exploit this vulnerability to cause grub to crash, leading to a Denial of Service. Possible data integrity or confidentiality compromise is not discarded."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de uso después de liberación ha sido identificada en GNU GRUB (Grand Unified Bootloader). El fallo ocurre porque el proceso de cierre de archivos retiene incorrectamente un puntero de memoria, dejando una referencia inválida a una estructura del sistema de archivos. Un atacante podría explotar esta vulnerabilidad para causar que grub falle, lo que lleva a una denegación de servicio. No se descarta un posible compromiso de la integridad o confidencialidad de los datos."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "GNU",
          "product": "grub2",
          "defaultStatus": "unaffected",
          "collectionURL": "https://git.savannah.gnu.org/git/grub.git",
          "packageName": "grub2",
          "versions": [
            {
              "version": "0",
              "lessThanOrEqual": "2.14",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "Red Hat",
          "product": "Red Hat Enterprise Linux 10",
          "defaultStatus": "affected",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "packageName": "grub2",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:10"
          ]
        },
        {
          "vendor": "Red Hat",
          "product": "Red Hat Enterprise Linux 7",
          "defaultStatus": "affected",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "packageName": "grub2",
          "cpes": [
            "cpe:/o:redhat:rhel_els:7"
          ]
        },
        {
          "vendor": "Red Hat",
          "product": "Red Hat Enterprise Linux 8",
          "defaultStatus": "affected",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "packageName": "grub2",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8"
          ]
        },
        {
          "vendor": "Red Hat",
          "product": "Red Hat Enterprise Linux 9",
          "defaultStatus": "affected",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "packageName": "grub2",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9"
          ]
        },
        {
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4",
          "defaultStatus": "affected",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "packageName": "openshift/ose-rhel-coreos-8",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ]
        },
        {
          "vendor": "Red Hat",
          "product": "Red Hat OpenShift Container Platform 4",
          "defaultStatus": "affected",
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "packageName": "openshift/ose-rhel-coreos-9",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
          "baseScore": 4.9,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "HIGH",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "availabilityImpact": "LOW"
        },
        "exploitabilityScore": 1.4,
        "impactScore": 3.4
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-11-19T14:17:17.793635Z",
          "id": "CVE-2025-54771",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-825"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://access.redhat.com/security/cve/CVE-2025-54771",
      "source": "[email protected]"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2413823",
      "source": "[email protected]"
    },
    {
      "url": "https://lists.gnu.org/archive/html/grub-devel/2025-11/msg00155.html",
      "source": "[email protected]"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2025/11/18/3",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ]
}