GRUB2 does not call the module fini... CVE-2024-2312

- AV AC AU C I A
发布: 2024-04-05
修订: 2024-08-29

GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead to a use-after-free condition, and could possibly lead to secure boot bypass.

0%
暂无可用Exp或PoC
当前有0条受影响产品信息