CVE-2024-45778

MediumCVSS 4.1

Published: 03/03/2025(UTC)Updated: 29/06/2026(UTC)Translated: 30/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

18th percentile - higher than 18% of all known CVEs

Summary

A stack overflow vulnerability was found in the BFS file system support in GRUB2. A crafted BFS filesystem image can trigger an uncontrolled loop, causing GRUB2 to crash.

Risk Assessment

An attacker could exploit this vulnerability to crash the bootloader, preventing the operating system from booting and potentially leading to a Denial of Service (DoS) attack.

Recommendation

Immediately update GRUB2 to the latest version containing the fix for CVE-2024-45778. Avoid mounting untrusted BFS filesystem images before applying the update.

Original NVD description (English source)

A stack overflow flaw was found when reading a BFS file system. A crafted BFS filesystem may lead to an uncontrolled loop, causing grub2 to crash.