Vulnerability · Published Feb 6, 2024 · Assigned by redhat
CVE-2024-1048Grub2: grub2-set-bootflag can be abused by local (pseudo-)users
Low 3.3
In plain English
A low-severity security flaw in grub2. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 19% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)3.3Low
Exploit odds (30 days)0.3%top 80.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-bootflag will create a temporary file with the new grubenv content and rename it to the original grubenv file. If the program is killed before the rename operation, the temporary file will not be removed and may fill the filesystem when invoked multiple times, resulting in a filesystem out of free inodes or blocks.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | grub2-common | 1:2.02-156.el8.alma.1 | ALSA-2024:3184 |
| AlmaLinux:9 | grub2-common | 1:2.06-77.el9.alma.1 | ALSA-2024:2456 |
| AlmaLinux:8 | grub2-efi-aa64 | 1:2.02-156.el8.alma.1 | ALSA-2024:3184 |
| AlmaLinux:9 | grub2-efi-aa64 | 1:2.06-77.el9.alma.1 | ALSA-2024:2456 |
| AlmaLinux:8 | grub2-efi-aa64-cdboot | 1:2.02-156.el8.alma.1 | ALSA-2024:3184 |
| AlmaLinux:9 | grub2-efi-aa64-cdboot | 1:2.06-77.el9.alma.1 | ALSA-2024:2456 |
| AlmaLinux:8 | grub2-efi-aa64-modules | 1:2.02-156.el8.alma.1 | ALSA-2024:3184 |
| AlmaLinux:9 | grub2-efi-aa64-modules | 1:2.06-77.el9.alma.1 | ALSA-2024:2456 |
| AlmaLinux:8 | grub2-efi-ia32 | 1:2.02-156.el8.alma.1 | ALSA-2024:3184 |
| AlmaLinux:8 | grub2-efi-ia32-cdboot | 1:2.02-156.el8.alma.1 | ALSA-2024:3184 |
| AlmaLinux:8 | grub2-efi-ia32-modules | 1:2.02-156.el8.alma.1 | ALSA-2024:3184 |
| AlmaLinux:8 | grub2-efi-x64 | 1:2.02-156.el8.alma.1 | ALSA-2024:3184 |
| AlmaLinux:9 | grub2-efi-x64 | 1:2.06-77.el9.alma.1 | ALSA-2024:2456 |
| AlmaLinux:8 | grub2-efi-x64-cdboot | 1:2.02-156.el8.alma.1 | ALSA-2024:3184 |
| AlmaLinux:9 | grub2-efi-x64-cdboot | 1:2.06-77.el9.alma.1 | ALSA-2024:2456 |
| AlmaLinux:8 | grub2-efi-x64-modules | 1:2.02-156.el8.alma.1 | ALSA-2024:3184 |
| AlmaLinux:9 | grub2-efi-x64-modules | 1:2.06-77.el9.alma.1 | ALSA-2024:2456 |
| AlmaLinux:8 | grub2-pc | 1:2.02-156.el8.alma.1 | ALSA-2024:3184 |
| AlmaLinux:9 | grub2-pc | 1:2.06-77.el9.alma.1 | ALSA-2024:2456 |
| AlmaLinux:8 | grub2-pc-modules | 1:2.02-156.el8.alma.1 | ALSA-2024:3184 |
| AlmaLinux:9 | grub2-pc-modules | 1:2.06-77.el9.alma.1 | ALSA-2024:2456 |
| AlmaLinux:8 | grub2-ppc64le | 1:2.02-156.el8.alma.1 | ALSA-2024:3184 |
| AlmaLinux:9 | grub2-ppc64le | 1:2.06-77.el9.alma.1 | ALSA-2024:2456 |
| AlmaLinux:8 | grub2-ppc64le-modules | 1:2.02-156.el8.alma.1 | ALSA-2024:3184 |
| AlmaLinux:9 | grub2-ppc64le-modules | 1:2.06-77.el9.alma.1 | ALSA-2024:2456 |
| AlmaLinux:8 | grub2-tools | 1:2.02-156.el8.alma.1 | ALSA-2024:3184 |
| AlmaLinux:9 | grub2-tools | 1:2.06-77.el9.alma.1 | ALSA-2024:2456 |
| AlmaLinux:8 | grub2-tools-efi | 1:2.02-156.el8.alma.1 | ALSA-2024:3184 |
| AlmaLinux:9 | grub2-tools-efi | 1:2.06-77.el9.alma.1 | ALSA-2024:2456 |
| AlmaLinux:8 | grub2-tools-extra | 1:2.02-156.el8.alma.1 | ALSA-2024:3184 |
| AlmaLinux:9 | grub2-tools-extra | 1:2.06-77.el9.alma.1 | ALSA-2024:2456 |
| AlmaLinux:8 | grub2-tools-minimal | 1:2.02-156.el8.alma.1 | ALSA-2024:3184 |
| AlmaLinux:9 | grub2-tools-minimal | 1:2.06-77.el9.alma.1 | ALSA-2024:2456 |
| Rocky Linux:8 | grub2 | 1:2.02-156.el8.rocky.0.1 | RLSA-2024:3184 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| grub2 | see references | |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Red Hat | Red Hat Enterprise Linux 6 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
Weakness: CWE-459 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
References
- RHSA-2024:2456 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:3184 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2024-1048 vdb-entry, x_refsource_REDHAT
- RHBZ#2256827 issue-tracking, x_refsource_REDHAT
- https://www.openwall.com/lists/oss-security/2024/02/06/3
- http://www.openwall.com/lists/oss-security/2024/02/06/3 x_transferred
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XRZQCVZ3XOASVFT6XLO7F2ZXOLOHIJZQ/ x_transferred
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YSJAEGRR3XHMBBBKYOVMII4P34IXEYPE/ x_transferred
- https://security.netapp.com/advisory/ntap-20240223-0007/ x_transferred