Skip to content
Fencer Vulns
low 3.3

CVE-2024-1048 json

Grub2: grub2-set-bootflag can be abused by local (pseudo-)users

published 2024-02-06 2 y ago modified 2026-11-05 3 d ago also EUVD-2024-16824

cvss
3.3
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.3%
EPSS 0.3% chance of exploitation in 30 days, percentile 19%
public exploits
0
none known

Summary

A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-bootflag will create a temporary file with the new grubenv content and rename it to the original grubenv file. If the program is killed before the rename operation, the temporary file will not be removed and may fill the filesystem when invoked multiple times, resulting in a filesystem out of free inodes or blocks.

Patch / fix

  • Red Hat Red Hat Enterprise Linux 8 1:2.02-156.el8
  • Red Hat Red Hat Enterprise Linux 9 1:2.06-77.el9
  • grub2 RHEL 8 1:2.02-156.el8
  • grub2-pc RHEL 8 1:2.02-156.el8
  • grub2-tools RHEL 8 1:2.02-156.el8
  • grub2-common RHEL 8 1:2.02-156.el8
  • grub2-efi-x64 RHEL 8 1:2.02-156.el8
  • grub2-ppc64le RHEL 8 1:2.02-156.el8
  • grub2-efi-aa64 RHEL 8 1:2.02-156.el8
  • grub2-efi-ia32 RHEL 8 1:2.02-156.el8

red hat advisories RHSA-2024:3184RHSA-2024:2456

  • grub2-pc AlmaLinux 8 1:2.02-156.el8.alma.1
  • grub2-tools AlmaLinux 8 1:2.02-156.el8.alma.1
  • grub2-common AlmaLinux 8 1:2.02-156.el8.alma.1
  • grub2-efi-x64 AlmaLinux 8 1:2.02-156.el8.alma.1
  • grub2-ppc64le AlmaLinux 8 1:2.02-156.el8.alma.1
  • grub2-efi-aa64 AlmaLinux 8 1:2.02-156.el8.alma.1
  • grub2-efi-ia32 AlmaLinux 8 1:2.02-156.el8.alma.1
  • grub2-tools-efi AlmaLinux 8 1:2.02-156.el8.alma.1

almalinux advisories ALSA-2024:3184ALSA-2024:2456

  • grub2 Rocky Linux 8 1:2.02-156.el8.rocky.0.1

rocky linux advisories RLSA-2024:3184

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2024-1048 updated cvss 3.3

grub2: grub2-set-bootflag can be abused by local (pseudo-)users

  • Red Hat Enterprise Linux BaseOS (v. 8) grub2 2.02-156.el8, grub2-pc 2.02-156.el8, grub2-tools 2.02-156.el8, grub2-common 2.02-156.el8, grub2-efi-x64 2.02-156.el8, grub2-ppc64le 2.02-156.el8, +13 more
    fixed: vendor fix RHSA-2024:3184
  • Red Hat Enterprise Linux BaseOS (v. 9) grub2 2.06-77.el9, grub2-pc 2.06-77.el9, grub2-tools 2.06-77.el9, grub2-common 2.06-77.el9, grub2-efi-x64 2.06-77.el9, grub2-ppc64le 2.06-77.el9, +10 more
    fixed: vendor fix RHSA-2024:2456
  • Red Hat Enterprise Linux 6 grub Red Hat Enterprise Linux 7 grub2, grub2-pc, grub2-efi, grub2-ppc64, grub2-tools, grub2-common, +15 more
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
2 y ago

Exploit prediction

0.27% chance of exploitation in the next 30 days, higher than 19% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
NVD 3.1 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

  • Red Hat Red Hat Enterprise Linux 8
  • Red Hat Red Hat Enterprise Linux 9
  • Red Hat Red Hat Enterprise Linux 6
  • Red Hat Red Hat Enterprise Linux 7

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.