---
id: CVE-2025-1118
title: A flaw was found in grub2
summary: >-
  A flaw was found in grub2. Grub's dump command is not blocked when grub is in
  lockdown mode, which allows the user to read any memory information, and an
  attacker may leverage this in order to extract signatures, salts, and other
  sensiti…
severity: medium
cvss: 4.4
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-501
published: '2025-02-19'
updated: '2026-06-25'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-1118'
references:
  - url: 'https://access.redhat.com/errata/RHSA-2025:16154'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/security/cve/CVE-2025-1118'
    label: secalert@redhat.com
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2346137'
    label: secalert@redhat.com
  - url: >-
      https://git.savannah.gnu.org/cgit/grub.git/commit/?id=34824806ac6302f91e8cabaa41308eaced25725f
    label: secalert@redhat.com
  - url: 'https://lists.gnu.org/archive/html/grub-devel/2025-02/msg00024.html'
    label: secalert@redhat.com
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-1118.json
  - url: 'https://www.cve.org/CVERecord?id=CVE-2025-1118'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2025-1118'
tags:
  - nvd
  - csaf
  - vex
  - red-hat
  - cve.org
epss: 0.00321
epssPercentile: 0.24991
ingestedAt: '2026-06-29T13:24:34.161Z'
vendor: Red Hat
product: Red Hat Enterprise Linux BaseOS (v. 10)
affected:
  - enterprise_linux 7
  - enterprise_linux 8
  - enterprise_linux 9
  - openshift_container_platform 4
  - enterprise_linux_baseos_v_10
patched:
  - enterprise_linux_baseos_v_10
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2025-03-03T17:23:06.868981Z'
---

## Overview

A flaw was found in grub2. Grub's dump command is not blocked when grub is in lockdown mode, which allows the user to read any memory information, and an attacker may leverage this in order to extract signatures, salts, and other sensitive information from the memory.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Vendor advisories

- **RHSA-2025:16154** · Red Hat · fixed in: Red Hat Enterprise Linux BaseOS (v. 10) · released 2025-09-18 · [advisory](https://access.redhat.com/errata/RHSA-2025:16154)
- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 · no fix planned: Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat OpenShift Container Platform 4 · updated 2026-10-13 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-1118.json)