A newly assigned CVE — CVE-2025-61664 — exposes a robustness flaw in the GRUB2 bootloader’s normal module: the command handler for normal_exit is not unregistered when the module is unloaded, leaving a dangling command pointer that can be invoked later and produce a kernel-mode use-after-free...