CVE-2025-0622

Summary

CVE-2025-0622 is a vulnerability affecting command/gpg that allows an attacker to execute arbitrary code. This issue arises due to a failure to properly remove hooks created by loaded modules when they are unloaded. Consequently, grub2 is coerced into invoking these hooks, leading to a use-after-free vulnerability. Successful exploitation of this issue could enable the attacker to bypass secure boot protections.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.