High severity7.8NVD Advisory· Published Nov 18, 2025· Updated May 20, 2026
CVE-2025-61662
CVE-2025-61662
Description
A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a programming error where the gettext command remains registered in memory after its module is unloaded. An attacker can exploit this condition by invoking the orphaned command, causing the application to access a memory location that is no longer valid. An attacker could exploit this vulnerability to cause grub to crash, leading to a Denial of Service. Possible data integrity or confidentiality compromise is not discarded.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
36- osv-coords34 versionspkg:rpm/almalinux/grub2-commonpkg:rpm/almalinux/grub2-efi-aa64pkg:rpm/almalinux/grub2-efi-aa64-cdbootpkg:rpm/almalinux/grub2-efi-aa64-modulespkg:rpm/almalinux/grub2-efi-ia32pkg:rpm/almalinux/grub2-efi-ia32-cdbootpkg:rpm/almalinux/grub2-efi-ia32-modulespkg:rpm/almalinux/grub2-efi-x64pkg:rpm/almalinux/grub2-efi-x64-cdbootpkg:rpm/almalinux/grub2-efi-x64-modulespkg:rpm/almalinux/grub2-pcpkg:rpm/almalinux/grub2-pc-modulespkg:rpm/almalinux/grub2-ppc64lepkg:rpm/almalinux/grub2-ppc64le-modulespkg:rpm/almalinux/grub2-toolspkg:rpm/almalinux/grub2-tools-efipkg:rpm/almalinux/grub2-tools-extrapkg:rpm/almalinux/grub2-tools-minimalpkg:rpm/opensuse/grub2&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/grub2&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/grub2&distro=openSUSE%20Tumbleweedpkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20Micro%205.2pkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20Micro%205.3pkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20Micro%205.4pkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20Micro%205.5pkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6pkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP7pkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP6pkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP7pkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20Server%2016.0pkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20applications%2016.0pkg:rpm/suse/grub2&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5pkg:rpm/suse/grub2&distro=SUSE%20Linux%20Micro%206.1pkg:rpm/suse/grub2&distro=SUSE%20Linux%20Micro%206.2
< 1:2.02-170.el8_10.1.alma.1+ 33 more
- (no CPE)range: < 1:2.02-170.el8_10.1.alma.1
- (no CPE)range: < 1:2.02-170.el8_10.1.alma.1
- (no CPE)range: < 1:2.02-170.el8_10.1.alma.1
- (no CPE)range: < 1:2.02-170.el8_10.1.alma.1
- (no CPE)range: < 1:2.02-170.el8_10.1.alma.1
- (no CPE)range: < 1:2.02-170.el8_10.1.alma.1
- (no CPE)range: < 1:2.02-170.el8_10.1.alma.1
- (no CPE)range: < 1:2.02-170.el8_10.1.alma.1
- (no CPE)range: < 1:2.02-170.el8_10.1.alma.1
- (no CPE)range: < 1:2.02-170.el8_10.1.alma.1
- (no CPE)range: < 1:2.02-170.el8_10.1.alma.1
- (no CPE)range: < 1:2.02-170.el8_10.1.alma.1
- (no CPE)range: < 1:2.02-170.el8_10.1.alma.1
- (no CPE)range: < 1:2.02-170.el8_10.1.alma.1
- (no CPE)range: < 1:2.02-170.el8_10.1.alma.1
- (no CPE)range: < 1:2.02-170.el8_10.1.alma.1
- (no CPE)range: < 1:2.02-170.el8_10.1.alma.1
- (no CPE)range: < 1:2.02-170.el8_10.1.alma.1
- (no CPE)range: < 2.12-150600.8.44.2
- (no CPE)range: < 2.12-160000.3.1
- (no CPE)range: < 2.12-67.1
- (no CPE)range: < 2.04-150300.22.61.1
- (no CPE)range: < 2.06-150400.11.66.1
- (no CPE)range: < 2.06-150400.11.66.1
- (no CPE)range: < 2.06-150500.29.59.1
- (no CPE)range: < 2.12-150600.8.44.2
- (no CPE)range: < 2.12-150700.19.19.1
- (no CPE)range: < 2.12-150600.8.44.2
- (no CPE)range: < 2.12-150700.19.19.1
- (no CPE)range: < 2.12-160000.3.1
- (no CPE)range: < 2.12-160000.3.1
- (no CPE)range: < 2.02-193.1
- (no CPE)range: < 2.12-slfo.1.1_3.1
- (no CPE)range: < 2.12-160000.3.1
Patches
Vulnerability mechanics
References
25- www.openwall.com/lists/oss-security/2025/11/18/5nvdMailing ListPatch
- access.redhat.com/security/cve/CVE-2025-61662nvdThird Party Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
- access.redhat.com/errata/RHSA-2026:10097nvd
- access.redhat.com/errata/RHSA-2026:14773nvd
- access.redhat.com/errata/RHSA-2026:15087nvd
- access.redhat.com/errata/RHSA-2026:17596nvd
- access.redhat.com/errata/RHSA-2026:4648nvd
- access.redhat.com/errata/RHSA-2026:4649nvd
- access.redhat.com/errata/RHSA-2026:4652nvd
- access.redhat.com/errata/RHSA-2026:4653nvd
- access.redhat.com/errata/RHSA-2026:4654nvd
- access.redhat.com/errata/RHSA-2026:4760nvd
- access.redhat.com/errata/RHSA-2026:4822nvd
- access.redhat.com/errata/RHSA-2026:4823nvd
- access.redhat.com/errata/RHSA-2026:4830nvd
- access.redhat.com/errata/RHSA-2026:4900nvd
- access.redhat.com/errata/RHSA-2026:4998nvd
- access.redhat.com/errata/RHSA-2026:5074nvd
- access.redhat.com/errata/RHSA-2026:5127nvd
- access.redhat.com/errata/RHSA-2026:5233nvd
- access.redhat.com/errata/RHSA-2026:6492nvd
- access.redhat.com/errata/RHSA-2026:7239nvd
- access.redhat.com/errata/RHSA-2026:7243nvd
- lists.gnu.org/archive/html/grub-devel/2025-11/msg00155.htmlnvd
News mentions
0No linked articles in our index yet.