Debian/grub2: medium 6.4
A local attacker with control over GRUB's configuration can bypass lockdown restrictions when booting with Secure Boot and load an unsigned GRUB module, while GRUB continues to report lockdown is enab
Action: Upgrade grub2 to 2.14-4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.14-4 | - |
Fixed versions
| 2.14-4 |
Sources
- osv: DEBIAN-CVE-2026-97876#Debian:14/grub2
- https://security-tracker.debian.org/tracker/CVE-2026-97876
published · modified · JSON