Description

GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead to a use-after-free condition, and could possibly lead to secure boot bypass.

INFO

Published Date :

2024-04-05T19:40:02.848Z

Last Modified :

2025-02-13T17:33:46.314Z

Source :

canonical
AFFECTED PRODUCTS

The following products are affected by CVE-2024-2312 vulnerability.

Vendors Products
Gnu
  • Grub2
Netapp
  • Bootstrap Os
  • Hci Compute Node
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-2312.

URL Resource
https://bugs.launchpad.net/ubuntu/+source/grub2-unsigned/+bug/2054127 cve-icon cve-icon cve-icon cve-icon
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2312 cve-icon cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-2312 cve-icon
https://security.netapp.com/advisory/ntap-20240426-0003/ cve-icon cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-2312 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact