CVE-2025-1118
MediumCVSS 4.4Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
A flaw in Grub2 allows the dump command to read arbitrary memory even when Grub is in lockdown mode, enabling an attacker to extract sensitive information such as signatures and salts from memory.
Risk Assessment
The organization risks exposure of confidential memory contents, potentially leading to system integrity compromise and credential theft.
Recommendation
Immediately update Grub2 to a version that blocks the dump command in lockdown mode and apply available security patches.
Original NVD description (English source)
A flaw was found in grub2. Grub's dump command is not blocked when grub is in lockdown mode, which allows the user to read any memory information, and an attacker may leverage this in order to extract signatures, salts, and other sensitive information from the memory.