A new GRUB2 vulnerability, tracked as CVE-2025-61661, permits an out‑of‑bounds write during USB string handling that can crash the bootloader when a maliciously‑crafted USB device is present during boot, producing a denial‑of‑service and a limited risk of data corruption; the defect is narrow...
A recently disclosed use‑after‑free defect in the GRUB2 bootloader — tracked as CVE‑2025‑61662 — stems from a missing unregister call in the gettext module and can lead to grub crashes and denial‑of‑service on affected systems. Background / Overview
GRUB (GRand Unified Bootloader) is the de...