CVE Catalog
CVE-2024-45783
MediumCVSS 4.4Exploitation Probability (EPSS)
Low risk0.21%
11th percentile - higher than 11% of all known CVEs
Summary
A flaw was found in the GRUB2 bootloader in the HFS+ filesystem driver. When failing to mount an HFS+ partition, the driver does not properly set an ERRNO value, which may lead to a NULL pointer access.
Risk Assessment
The risk involves a potential critical error during system boot, which may prevent normal booting or cause a system crash.
Recommendation
It is recommended to immediately update GRUB2 to the latest version containing the fix for CVE-2024-45783 and reinstall the bootloader on all systems.
Original NVD description (English source)
A flaw was found in grub2. When failing to mount an HFS+ grub, the hfsplus filesystem driver doesn't properly set an ERRNO value. This issue may lead to a NULL pointer access.