Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
Update Needed for Grub2 to Fix Security Flaw
published 7 months ago
Summary
Grub2, a key component of many Linux systems, has a security issue that could allow an attacker to execute malicious code on your system. You'll need to update your Grub2 software to protect your system from potential harm. Check with your Linux distribution provider for the latest updates.
What to do
- Update redhat grub2 to version 1:2.06-114.el9_7.1.
- Update redhat grub2-common to version 1:2.06-114.el9_7.1.
- Update redhat grub2-debuginfo to version 1:2.06-114.el9_7.1.
- Update redhat grub2-debugsource to version 1:2.06-114.el9_7.1.
- Update redhat grub2-efi-aa64 to version 1:2.06-114.el9_7.1.
- Update redhat grub2-efi-aa64-cdboot to version 1:2.06-114.el9_7.1.
- Update redhat grub2-efi-aa64-modules to version 1:2.06-114.el9_7.1.
- Update redhat grub2-efi-x64 to version 1:2.06-114.el9_7.1.
- Update redhat grub2-efi-x64-cdboot to version 1:2.06-114.el9_7.1.
- Update redhat grub2-efi-x64-modules to version 1:2.06-114.el9_7.1.
- Update redhat grub2-emu-debuginfo to version 1:2.06-114.el9_7.1.
- Update redhat grub2-pc to version 1:2.06-114.el9_7.1.
- Update redhat grub2-pc-modules to version 1:2.06-114.el9_7.1.
- Update redhat grub2-ppc64le to version 1:2.06-114.el9_7.1.
- Update redhat grub2-ppc64le-modules to version 1:2.06-114.el9_7.1.
- Update redhat grub2-tools to version 1:2.06-114.el9_7.1.
- Update redhat grub2-tools-debuginfo to version 1:2.06-114.el9_7.1.
- Update redhat grub2-tools-efi to version 1:2.06-114.el9_7.1.
- Update redhat grub2-tools-efi-debuginfo to version 1:2.06-114.el9_7.1.
- Update redhat grub2-tools-extra to version 1:2.06-114.el9_7.1.
- Update redhat grub2-tools-extra-debuginfo to version 1:2.06-114.el9_7.1.
- Update redhat grub2-tools-minimal to version 1:2.06-114.el9_7.1.
- Update redhat grub2-tools-minimal-debuginfo to version 1:2.06-114.el9_7.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:enterprise_linux:9::baseos | redhat | grub2 |
< 1:2.06-114.el9_7.1 Fix: upgrade to 1:2.06-114.el9_7.1
|
| Red Hat:enterprise_linux:9::baseos | redhat | grub2-common |
< 1:2.06-114.el9_7.1 Fix: upgrade to 1:2.06-114.el9_7.1
|
| Red Hat:enterprise_linux:9::baseos | redhat | grub2-debuginfo |
< 1:2.06-114.el9_7.1 Fix: upgrade to 1:2.06-114.el9_7.1
|
| Red Hat:enterprise_linux:9::baseos | redhat | grub2-debugsource |
< 1:2.06-114.el9_7.1 Fix: upgrade to 1:2.06-114.el9_7.1
|
| Red Hat:enterprise_linux:9::baseos | redhat | grub2-efi-aa64 |
< 1:2.06-114.el9_7.1 Fix: upgrade to 1:2.06-114.el9_7.1
|
| Red Hat:enterprise_linux:9::baseos | redhat | grub2-efi-aa64-cdboot |
< 1:2.06-114.el9_7.1 Fix: upgrade to 1:2.06-114.el9_7.1
|
| Red Hat:enterprise_linux:9::baseos | redhat | grub2-efi-aa64-modules |
< 1:2.06-114.el9_7.1 Fix: upgrade to 1:2.06-114.el9_7.1
|
| Red Hat:enterprise_linux:9::baseos | redhat | grub2-efi-x64 |
< 1:2.06-114.el9_7.1 Fix: upgrade to 1:2.06-114.el9_7.1
|
| Red Hat:enterprise_linux:9::baseos | redhat | grub2-efi-x64-cdboot |
< 1:2.06-114.el9_7.1 Fix: upgrade to 1:2.06-114.el9_7.1
|
| Red Hat:enterprise_linux:9::baseos | redhat | grub2-efi-x64-modules |
< 1:2.06-114.el9_7.1 Fix: upgrade to 1:2.06-114.el9_7.1
|
| Red Hat:enterprise_linux:9::baseos | redhat | grub2-emu-debuginfo |
< 1:2.06-114.el9_7.1 Fix: upgrade to 1:2.06-114.el9_7.1
|
| Red Hat:enterprise_linux:9::baseos | redhat | grub2-pc |
< 1:2.06-114.el9_7.1 Fix: upgrade to 1:2.06-114.el9_7.1
|
| Red Hat:enterprise_linux:9::baseos | redhat | grub2-pc-modules |
< 1:2.06-114.el9_7.1 Fix: upgrade to 1:2.06-114.el9_7.1
|
| Red Hat:enterprise_linux:9::baseos | redhat | grub2-ppc64le |
< 1:2.06-114.el9_7.1 Fix: upgrade to 1:2.06-114.el9_7.1
|
| Red Hat:enterprise_linux:9::baseos | redhat | grub2-ppc64le-modules |
< 1:2.06-114.el9_7.1 Fix: upgrade to 1:2.06-114.el9_7.1
|
| Red Hat:enterprise_linux:9::baseos | redhat | grub2-tools |
< 1:2.06-114.el9_7.1 Fix: upgrade to 1:2.06-114.el9_7.1
|
| Red Hat:enterprise_linux:9::baseos | redhat | grub2-tools-debuginfo |
< 1:2.06-114.el9_7.1 Fix: upgrade to 1:2.06-114.el9_7.1
|
| Red Hat:enterprise_linux:9::baseos | redhat | grub2-tools-efi |
< 1:2.06-114.el9_7.1 Fix: upgrade to 1:2.06-114.el9_7.1
|
| Red Hat:enterprise_linux:9::baseos | redhat | grub2-tools-efi-debuginfo |
< 1:2.06-114.el9_7.1 Fix: upgrade to 1:2.06-114.el9_7.1
|
| Red Hat:enterprise_linux:9::baseos | redhat | grub2-tools-extra |
< 1:2.06-114.el9_7.1 Fix: upgrade to 1:2.06-114.el9_7.1
|
| Red Hat:enterprise_linux:9::baseos | redhat | grub2-tools-extra-debuginfo |
< 1:2.06-114.el9_7.1 Fix: upgrade to 1:2.06-114.el9_7.1
|
| Red Hat:enterprise_linux:9::baseos | redhat | grub2-tools-minimal |
< 1:2.06-114.el9_7.1 Fix: upgrade to 1:2.06-114.el9_7.1
|
| Red Hat:enterprise_linux:9::baseos | redhat | grub2-tools-minimal-debuginfo |
< 1:2.06-114.el9_7.1 Fix: upgrade to 1:2.06-114.el9_7.1
|
Original advisory text
Red Hat Security Advisory: grub2 security update
References
- https://access.redhat.com/errata/RHSA-2026:4760 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#moderate Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2414683 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_4760.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2025-61662 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-61662 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-61662 Vendor Advisory
- https://lists.gnu.org/archive/html/grub-devel/2025-11/msg00155.html Third Party Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published18 Mar 2026
Updated23 Mar 2026
First seen23 Mar 2026
Sources
RHSA-2026:4760 · OSV
Track software like this
Free during beta