CVE-2024-45781

Summary

CVE-2024-45781 is a newly discovered vulnerability in grub2, an popular bootloader used in Linux systems. The issue lies in the way grub2 handles symbolic links on UFS filesystems. Specifically, grub2 fails to validate the input length when reading a symbolic link's name, leading to a heap out-of-bounds write. This vulnerability can result in data integrity issues and potentially enable an attacker to bypass secure boot protections.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.