VULNERABILITY INTELLIGENCE
CVE-2025-1118
CVSS score4.4 MEDIUM
EPSS probability0.32%
CISA KEVNot currently listed
Published2025-02-19
Last modified2026-10-21
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Description
A flaw was found in grub2. Grub's dump command is not blocked when grub is in lockdown mode, which allows the user to read any memory information, and an attacker may leverage this in order to extract signatures, salts, and other sensitive information from the memory.
Weakness classification
- secalert@redhat.com: CWE-501