{"id":"CVE-2025-1118","title":"A flaw was found in grub2","summary":"A flaw was found in grub2. Grub's dump command is not blocked when grub is in lockdown mode, which allows the user to read any memory information, and an attacker may leverage this in order to extract signatures, salts, and other sensiti…","severity":"medium","cvss":4.4,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-501"],"published":"2025-02-19","updated":"2026-06-25","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-1118","references":[{"url":"https://access.redhat.com/errata/RHSA-2025:16154","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/security/cve/CVE-2025-1118","label":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2346137","label":"secalert@redhat.com"},{"url":"https://git.savannah.gnu.org/cgit/grub.git/commit/?id=34824806ac6302f91e8cabaa41308eaced25725f","label":"secalert@redhat.com"},{"url":"https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html","label":"secalert@redhat.com"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-1118.json"},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-1118"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-1118"}],"tags":["nvd","csaf","vex","red-hat","cve.org"],"epss":0.00321,"epssPercentile":0.24991,"ingestedAt":"2026-06-29T13:24:34.161Z","vendor":"Red Hat","product":"Red Hat Enterprise Linux BaseOS (v. 10)","affected":["enterprise_linux 7","enterprise_linux 8","enterprise_linux 9","openshift_container_platform 4","enterprise_linux_baseos_v_10"],"patched":["enterprise_linux_baseos_v_10"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2025-03-03T17:23:06.868981Z"},"slug":"CVE-2025-1118","body":"## Overview\n\nA flaw was found in grub2. Grub's dump command is not blocked when grub is in lockdown mode, which allows the user to read any memory information, and an attacker may leverage this in order to extract signatures, salts, and other sensitive information from the memory.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **RHSA-2025:16154** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS (v. 10) · released 2025-09-18 · [advisory](https://access.redhat.com/errata/RHSA-2025:16154)\n- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 · no fix planned: Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 · updated 2026-10-13 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-1118.json)","depth":"sunlit","depthScore":24,"depthScoreParts":{"impact":24.2,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}