CVE-2022-2601 Memory corruption in grub2
A buffer overflow in GRUB allows attackers to bypass Secure Boot via a malicious font file, requiring OS-level patching.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2022-2601?
CVE-2022-2601 is a high-severity memory corruption vulnerability in Fedoraproject Fedora, published on 14 Dec 2022. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead to an overflow when calculating the max_glyph_size value, allocating a smaller than needed buffer for the glyph, this further leads to a buffer overflow and a heap based out-of-bounds write. An attacker may use this vulnerability to circumvent the secure boot mechanism.
Which versions are affected by CVE-2022-2601?
It affects 8 products.
Linux distribution packages (40)
grub2 Red Hat:enterprise_linux:7::client | All versions | 1:2.02-0.87.el7_9.14 |
grub2-common Red Hat:enterprise_linux:7::client | All versions | 1:2.02-0.87.el7_9.14 |
grub2-debuginfo Red Hat:enterprise_linux:7::client | All versions | 1:2.02-0.87.el7_9.14 |
grub2-efi-aa64-modules Red Hat:enterprise_linux:7::client | All versions | 1:2.02-0.87.el7_9.14 |
grub2-efi-ia32 Red Hat:enterprise_linux:7::client | All versions | 1:2.02-0.87.el7_9.14 |
grub2-efi-ia32-cdboot Red Hat:enterprise_linux:7::client | All versions | 1:2.02-0.87.el7_9.14 |
grub2-efi-ia32-modules Red Hat:enterprise_linux:7::client | All versions | 1:2.02-0.87.el7_9.14 |
grub2-efi-x64 Red Hat:enterprise_linux:7::client | All versions | 1:2.02-0.87.el7_9.14 |
grub2-efi-x64-cdboot Red Hat:enterprise_linux:7::client | All versions | 1:2.02-0.87.el7_9.14 |
grub2-efi-x64-modules Red Hat:enterprise_linux:7::client | All versions | 1:2.02-0.87.el7_9.14 |
grub2-pc Red Hat:enterprise_linux:7::client | All versions | 1:2.02-0.87.el7_9.14 |
grub2-pc-modules Red Hat:enterprise_linux:7::client | All versions | 1:2.02-0.87.el7_9.14 |
grub2-ppc-modules Red Hat:enterprise_linux:7::client | All versions | 1:2.02-0.87.el7_9.14 |
grub2-ppc64-modules Red Hat:enterprise_linux:7::client | All versions | 1:2.02-0.87.el7_9.14 |
grub2-ppc64le-modules Red Hat:enterprise_linux:7::client | All versions | 1:2.02-0.87.el7_9.14 |
grub2-tools Red Hat:enterprise_linux:7::client | All versions | 1:2.02-0.87.el7_9.14 |
grub2-tools-extra Red Hat:enterprise_linux:7::client | All versions | 1:2.02-0.87.el7_9.14 |
grub2-tools-minimal Red Hat:enterprise_linux:7::client | All versions | 1:2.02-0.87.el7_9.14 |
grub2-debuginfo Red Hat:enterprise_linux:7::computenode | All versions | 1:2.02-0.87.el7_9.14 |
grub2-efi-aa64-modules Red Hat:enterprise_linux:7::computenode | All versions | 1:2.02-0.87.el7_9.14 |
grub2-efi-ia32-cdboot Red Hat:enterprise_linux:7::computenode | All versions | 1:2.02-0.87.el7_9.14 |
grub2-efi-x64-cdboot Red Hat:enterprise_linux:7::computenode | All versions | 1:2.02-0.87.el7_9.14 |
grub2-ppc-modules Red Hat:enterprise_linux:7::computenode | All versions | 1:2.02-0.87.el7_9.14 |
grub2-ppc64-modules Red Hat:enterprise_linux:7::computenode | All versions | 1:2.02-0.87.el7_9.14 |
grub2-ppc64le-modules Red Hat:enterprise_linux:7::computenode | All versions | 1:2.02-0.87.el7_9.14 |
grub2 Red Hat:enterprise_linux:7::server | All versions | 1:2.02-0.87.el7_9.14 |
grub2-common Red Hat:enterprise_linux:7::server | All versions | 1:2.02-0.87.el7_9.14 |
grub2-debuginfo Red Hat:enterprise_linux:7::server | All versions | 1:2.02-0.87.el7_9.14 |
grub2-efi-aa64-modules Red Hat:enterprise_linux:7::server | All versions | 1:2.02-0.87.el7_9.14 |
grub2-efi-ia32 Red Hat:enterprise_linux:7::server | All versions | 1:2.02-0.87.el7_9.14 |
grub2-efi-ia32-cdboot Red Hat:enterprise_linux:7::server | All versions | 1:2.02-0.87.el7_9.14 |
grub2-efi-ia32-modules Red Hat:enterprise_linux:7::server | All versions | 1:2.02-0.87.el7_9.14 |
grub2-efi-x64 Red Hat:enterprise_linux:7::server | All versions | 1:2.02-0.87.el7_9.14 |
grub2-efi-x64-cdboot Red Hat:enterprise_linux:7::server | All versions | 1:2.02-0.87.el7_9.14 |
grub2-efi-x64-modules Red Hat:enterprise_linux:7::server | All versions | 1:2.02-0.87.el7_9.14 |
grub2-pc Red Hat:enterprise_linux:7::server | All versions | 1:2.02-0.87.el7_9.14 |
grub2-pc-modules Red Hat:enterprise_linux:7::server | All versions | 1:2.02-0.87.el7_9.14 |
grub2-ppc-modules Red Hat:enterprise_linux:7::server | All versions | 1:2.02-0.87.el7_9.14 |
grub2-ppc64 Red Hat:enterprise_linux:7::server | All versions | 1:2.02-0.87.el7_9.14 |
grub2-ppc64-modules Red Hat:enterprise_linux:7::server | All versions | 1:2.02-0.87.el7_9.14 |
Products include Fedoraproject Fedora, Gnu Grub2, Redhat Enterprise Linux Eus, Redhat Enterprise Linux for Power Little Endian Eus, Redhat Enterprise Linux Server Aus, Redhat Enterprise Linux Server for Power Little Endian Update Services for Sap Solutions and 2 more.
How do I fix CVE-2022-2601?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2022-2601 being exploited?
There is no known exploitation of CVE-2022-2601 in the wild and no public exploit code.
Other vulnerabilities in Fedoraproject Fedora
Sources
Also known as AZL-11604, AZL-34787, DEBIAN-CVE-2022-2601, GHSA-c8f6-x9xm-x27g, RHSA-2024:2002, UBUNTU-CVE-2022-2601.