CVE-2025-54771

MEDIUM

MEDIUM Priority: 0.01 BB Relevance: 35/100

Published: 2025-11-18 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

No Auth No Interaction

CVSS Vector Breakdown

AV: Local

AC: High

PR: None

UI: None

S: Unchanged

C: Low

I: Low

A: Low

Description

A use-after-free vulnerability has been identified in the GNU GRUB (Grand Unified Bootloader). The flaw occurs because the file-closing process incorrectly retains a memory pointer, leaving an invalid reference to a file system structure. An attacker could exploit this vulnerability to cause grub to crash, leading to a Denial of Service. Possible data integrity or confidentiality compromise is not discarded.