CVE-2024-1048
LOW
INFO
Priority: 0.01
BB Relevance:
32/100
Published: 2024-02-06
Modified: 2026-11-05
First seen: 2026-11-05
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
Low
Description
A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-bootflag will create a temporary file with the new grubenv content and rename it to the original grubenv file. If the program is killed before the rename operation, the temporary file will not be removed and may fill the filesystem when invoked multiple times, resulting in a filesystem out of free inodes or blocks.
Weakness Classification (1)
Affected Software (4)
| Vendor | Product | Version |
|---|---|---|
| fedoraproject | fedora | 40 |
| gnu | grub2 | - |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux | 9.0 |
References & Advisories (9)
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vdb-entry
x_refsource_REDHAT
issue-tracking
x_refsource_REDHAT