Skip to content
Fencer Vulns
medium 6.7

CVE-2024-2312 json

GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks afte…

published 2024-04-05 2 y ago modified 2026-06-17 4 mo ago also EUVD-2024-27267

cvss
6.7
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.4%
EPSS 0.4% chance of exploitation in 30 days, percentile 32%
public exploits
0
none known

Summary

GRUB2 does not call the module fini functions on exit, leading to Debian/Ubuntu's peimage GRUB2 module leaving UEFI system table hooks after exit. This lead to a use-after-free condition, and could possibly lead to secure boot bypass.

Patch / fix

  • Debian Debian based GNU GRUB 2.12-1ubuntu5
  • gnu grub2 2.12-1ubuntu5
  • grub2 Debian 14, Debian 13 2.12-2

debian advisories DEBIAN-CVE-2024-2312

  • grub2-signed Ubuntu 24.04 LTS 1.202
  • grub2-unsigned Ubuntu 24.04 LTS 2.12-1ubuntu7

ubuntu advisories UBUNTU-CVE-2024-2312

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • shim SLE Module for Basesystem 15 SP7, SLE Micro 5.5, SLE Micro 5.4 +13 more 16.1-150300.4.31.3
  • shim Linux Micro 6.2 16.1-160000.1.1
  • shim Linux Micro 6.1 16.1-slfo.1.1_1.1
  • shim Linux Micro 6.0 16.1-1.1
  • shim SLES LTSS Extended Security 12 SP5, SLES 12 SP5-LTSS 16.1-25.34.1

suse advisories SUSE-SU-2026:0741-2SUSE-SU-2026:1414-1SUSE-RU-2026:20683-1SUSE-SU-2026:0741-1SUSE-RU-2026:20056-1SUSE-RU-2026:20004-1

  • shim openSUSE Leap 16.0 16.1-160000.1.1

opensuse advisories openSUSE-RU-2026:20325-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2024-2312 updated cvss 6.7

grub2: grub-efi crashes upon `exit`

  • Red Hat Enterprise Linux 7 grub2, grub2-pc, grub2-efi, grub2-ppc64, grub2-tools, grub2-common, +15 more Red Hat Enterprise Linux 8 grub2, grub2-pc, grub2-tools, grub2-common, grub2-efi-x64, grub2-ppc64le, +13 more Red Hat Enterprise Linux 9 grub2, grub2-pc, grub2-tools, grub2-common, grub2-efi-x64, grub2-ppc64le, +10 more Red Hat Enterprise Linux 10 grub2
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
2 y ago

Exploit prediction

0.38% chance of exploitation in the next 30 days, higher than 32% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • bugs.launchpad.net https://bugs.launchpad.net/ubuntu/+source/grub2-unsigned/+bug/2054127 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CNA 3.1 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

  • Debian Debian based GNU GRUB
  • gnu grub2

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.