CVE-2025-0690 Grub2: read: integer overflow may lead to out-of-bounds write
An integer overflow in GRUB2's read command allows heap out-of-bounds writes, potentially enabling secure boot bypass or code execution.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2025-0690?
CVE-2025-0690 is a medium-severity vulnerability in Red Hat Enterprise Linux 10, published on 24 Feb 2025. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
The read command is used to read the keyboard input from the user, while reads it keeps the input length in a 32-bit integer value which is further used to reallocate the line buffer to accept the next character. During this process, with a line big enough it's possible to make this variable to overflow leading to a out-of-bounds write in the heap based buffer. This flaw may be leveraged to corrupt grub's internal critical data and secure boot bypass is not discarded as consequence.
Weakness: CWE-787
Which versions are affected by CVE-2025-0690?
How do I fix CVE-2025-0690?
Apply the vendor's patch.
Is CVE-2025-0690 being exploited?
There is no known exploitation of CVE-2025-0690 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Sources
Also known as AZL-57150, AZL-57159, BELL-CVE-2025-0690, DEBIAN-CVE-2025-0690, GHSA-9fg2-2f57-9p5h, UBUNTU-CVE-2025-0690.