CVE-2023-4001
Fixed in a distro release EPSS <1%CVSS 6.8
An authentication bypass flaw was found in GRUB due to the way that GRUB uses the UUID of a device to search for the configuration file that contains the password hash for the GRUB password protection feature. An attacker capable of attaching an external drive such as a USB stick containing a file system with a duplicate UUID (the same as in the "/boot/" file system) can bypass the GRUB password protection feature on UEFI systems, which enumerate removable drives before non-removable ones. This issue was introduced in a downstream patch in Red Hat's version of grub2 and does not affect the upstream package.
Products: Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Extended Update Support, Red Hat Enterprise Linux 9.2 Extended Update Support, Red Hat Enterprise Linux 8
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 9 | grub2-common | 1:2.06-70.el9_3.2.alma.1 |
| AlmaLinux 9 | grub2-efi-aa64 | 1:2.06-70.el9_3.2.alma.1 |
| AlmaLinux 9 | grub2-efi-aa64-cdboot | 1:2.06-70.el9_3.2.alma.1 |
| AlmaLinux 9 | grub2-efi-aa64-modules | 1:2.06-70.el9_3.2.alma.1 |
| AlmaLinux 9 | grub2-efi-x64 | 1:2.06-70.el9_3.2.alma.1 |
| AlmaLinux 9 | grub2-efi-x64-cdboot | 1:2.06-70.el9_3.2.alma.1 |
| AlmaLinux 9 | grub2-efi-x64-modules | 1:2.06-70.el9_3.2.alma.1 |
| AlmaLinux 9 | grub2-pc | 1:2.06-70.el9_3.2.alma.1 |
| AlmaLinux 9 | grub2-pc-modules | 1:2.06-70.el9_3.2.alma.1 |
| AlmaLinux 9 | grub2-ppc64le | 1:2.06-70.el9_3.2.alma.1 |
| AlmaLinux 9 | grub2-ppc64le-modules | 1:2.06-70.el9_3.2.alma.1 |
| AlmaLinux 9 | grub2-tools | 1:2.06-70.el9_3.2.alma.1 |
| AlmaLinux 9 | grub2-tools-efi | 1:2.06-70.el9_3.2.alma.1 |
| AlmaLinux 9 | grub2-tools-extra | 1:2.06-70.el9_3.2.alma.1 |
| AlmaLinux 9 | grub2-tools-minimal | 1:2.06-70.el9_3.2.alma.1 |
| Amazon Linux 2023 | grub2-common | 1:2.06-61.amzn2023.0.11 |
| Amazon Linux 2023 | grub2-efi-aa64 | 1:2.06-61.amzn2023.0.11 |
| Amazon Linux 2023 | grub2-efi-aa64-cdboot | 1:2.06-61.amzn2023.0.11 |
| Amazon Linux 2023 | grub2-efi-aa64-ec2 | 1:2.06-61.amzn2023.0.11 |
| Amazon Linux 2023 | grub2-efi-aa64-modules | 1:2.06-61.amzn2023.0.11 |
| Amazon Linux 2023 | grub2-efi-x64 | 1:2.06-61.amzn2023.0.11 |
| Amazon Linux 2023 | grub2-efi-x64-cdboot | 1:2.06-61.amzn2023.0.11 |
| Amazon Linux 2023 | grub2-efi-x64-ec2 | 1:2.06-61.amzn2023.0.11 |
| Amazon Linux 2023 | grub2-efi-x64-modules | 1:2.06-61.amzn2023.0.11 |
| Amazon Linux 2023 | grub2-emu | 1:2.06-61.amzn2023.0.11 |
| Amazon Linux 2023 | grub2-emu-modules | 1:2.06-61.amzn2023.0.11 |
| Amazon Linux 2023 | grub2-pc | 1:2.06-61.amzn2023.0.11 |
| Amazon Linux 2023 | grub2-pc-modules | 1:2.06-61.amzn2023.0.11 |
| Amazon Linux 2023 | grub2-tools | 1:2.06-61.amzn2023.0.11 |
| Amazon Linux 2023 | grub2-tools-efi | 1:2.06-61.amzn2023.0.11 |
| Amazon Linux 2023 | grub2-tools-extra | 1:2.06-61.amzn2023.0.11 |
| Amazon Linux 2023 | grub2-tools-minimal | 1:2.06-61.amzn2023.0.11 |
| Red Hat Enterprise Linux 9 | grub2 | 1:2.06-70.el9_3.2 |
| Red Hat Enterprise Linux 9 | grub2-common | 1:2.06-70.el9_3.2 |
| Red Hat Enterprise Linux 9 | grub2-debuginfo | 1:2.06-70.el9_3.2 |
| Red Hat Enterprise Linux 9 | grub2-debugsource | 1:2.06-70.el9_3.2 |
| Red Hat Enterprise Linux 9 | grub2-efi-aa64 | 1:2.06-70.el9_3.2 |
| Red Hat Enterprise Linux 9 | grub2-efi-aa64-cdboot | 1:2.06-70.el9_3.2 |
| Red Hat Enterprise Linux 9 | grub2-efi-aa64-modules | 1:2.06-70.el9_3.2 |
| Red Hat Enterprise Linux 9 | grub2-efi-x64 | 1:2.06-70.el9_3.2 |
| Red Hat Enterprise Linux 9 | grub2-efi-x64-cdboot | 1:2.06-70.el9_3.2 |
| Red Hat Enterprise Linux 9 | grub2-efi-x64-modules | 1:2.06-70.el9_3.2 |
| Red Hat Enterprise Linux 9 | grub2-emu-debuginfo | 1:2.06-70.el9_3.2 |
| Red Hat Enterprise Linux 9 | grub2-pc | 1:2.06-70.el9_3.2 |
| Red Hat Enterprise Linux 9 | grub2-pc-modules | 1:2.06-70.el9_3.2 |
| Red Hat Enterprise Linux 9 | grub2-ppc64le | 1:2.06-70.el9_3.2 |
| Red Hat Enterprise Linux 9 | grub2-ppc64le-modules | 1:2.06-70.el9_3.2 |
| Red Hat Enterprise Linux 9 | grub2-tools | 1:2.06-70.el9_3.2 |
| Red Hat Enterprise Linux 9 | grub2-tools-debuginfo | 1:2.06-70.el9_3.2 |
| Red Hat Enterprise Linux 9 | grub2-tools-efi | 1:2.06-70.el9_3.2 |
| Red Hat Enterprise Linux 9 | grub2-tools-efi-debuginfo | 1:2.06-70.el9_3.2 |
| Red Hat Enterprise Linux 9 | grub2-tools-extra | 1:2.06-70.el9_3.2 |
| Red Hat Enterprise Linux 9 | grub2-tools-extra-debuginfo | 1:2.06-70.el9_3.2 |
| Red Hat Enterprise Linux 9 | grub2-tools-minimal | 1:2.06-70.el9_3.2 |
| Red Hat Enterprise Linux 9 | grub2-tools-minimal-debuginfo | 1:2.06-70.el9_3.2 |
| Red Hat rhel eus 9.0 | grub2 | 1:2.06-27.el9_0.16 |
| Red Hat rhel eus 9.0 | grub2-common | 1:2.06-27.el9_0.16 |
| Red Hat rhel eus 9.0 | grub2-debuginfo | 1:2.06-27.el9_0.16 |
| Red Hat rhel eus 9.0 | grub2-debugsource | 1:2.06-27.el9_0.16 |
| Red Hat rhel eus 9.0 | grub2-efi-aa64 | 1:2.06-27.el9_0.16 |
| Red Hat rhel eus 9.0 | grub2-efi-aa64-cdboot | 1:2.06-27.el9_0.16 |
| Red Hat rhel eus 9.0 | grub2-efi-aa64-modules | 1:2.06-27.el9_0.16 |
| Red Hat rhel eus 9.0 | grub2-efi-x64 | 1:2.06-27.el9_0.16 |
| Red Hat rhel eus 9.0 | grub2-efi-x64-cdboot | 1:2.06-27.el9_0.16 |
| Red Hat rhel eus 9.0 | grub2-efi-x64-modules | 1:2.06-27.el9_0.16 |
| Red Hat rhel eus 9.0 | grub2-emu-debuginfo | 1:2.06-27.el9_0.16 |
| Red Hat rhel eus 9.0 | grub2-pc | 1:2.06-27.el9_0.16 |
| Red Hat rhel eus 9.0 | grub2-pc-modules | 1:2.06-27.el9_0.16 |
| Red Hat rhel eus 9.0 | grub2-ppc64le | 1:2.06-27.el9_0.16 |
| Red Hat rhel eus 9.0 | grub2-ppc64le-modules | 1:2.06-27.el9_0.16 |
| Red Hat rhel eus 9.0 | grub2-tools | 1:2.06-27.el9_0.16 |
| Red Hat rhel eus 9.0 | grub2-tools-debuginfo | 1:2.06-27.el9_0.16 |
| Red Hat rhel eus 9.0 | grub2-tools-efi | 1:2.06-27.el9_0.16 |
| Red Hat rhel eus 9.0 | grub2-tools-efi-debuginfo | 1:2.06-27.el9_0.16 |
| Red Hat rhel eus 9.0 | grub2-tools-extra | 1:2.06-27.el9_0.16 |
| Red Hat rhel eus 9.0 | grub2-tools-extra-debuginfo | 1:2.06-27.el9_0.16 |
| Red Hat rhel eus 9.0 | grub2-tools-minimal | 1:2.06-27.el9_0.16 |
| Red Hat rhel eus 9.0 | grub2-tools-minimal-debuginfo | 1:2.06-27.el9_0.16 |
| Red Hat rhel eus 9.2 | grub2 | 1:2.06-61.el9_2.2 |
| Red Hat rhel eus 9.2 | grub2-common | 1:2.06-61.el9_2.2 |
| Red Hat rhel eus 9.2 | grub2-debuginfo | 1:2.06-61.el9_2.2 |
| Red Hat rhel eus 9.2 | grub2-debugsource | 1:2.06-61.el9_2.2 |
| Red Hat rhel eus 9.2 | grub2-efi-aa64 | 1:2.06-61.el9_2.2 |
| Red Hat rhel eus 9.2 | grub2-efi-aa64-cdboot | 1:2.06-61.el9_2.2 |
| Red Hat rhel eus 9.2 | grub2-efi-aa64-modules | 1:2.06-61.el9_2.2 |
| Red Hat rhel eus 9.2 | grub2-efi-x64 | 1:2.06-61.el9_2.2 |
| Red Hat rhel eus 9.2 | grub2-efi-x64-cdboot | 1:2.06-61.el9_2.2 |
| Red Hat rhel eus 9.2 | grub2-efi-x64-modules | 1:2.06-61.el9_2.2 |
| Red Hat rhel eus 9.2 | grub2-emu-debuginfo | 1:2.06-61.el9_2.2 |
| Red Hat rhel eus 9.2 | grub2-pc | 1:2.06-61.el9_2.2 |
| Red Hat rhel eus 9.2 | grub2-pc-modules | 1:2.06-61.el9_2.2 |
| Red Hat rhel eus 9.2 | grub2-ppc64le | 1:2.06-61.el9_2.2 |
| Red Hat rhel eus 9.2 | grub2-ppc64le-modules | 1:2.06-61.el9_2.2 |
| Red Hat rhel eus 9.2 | grub2-tools | 1:2.06-61.el9_2.2 |
| Red Hat rhel eus 9.2 | grub2-tools-debuginfo | 1:2.06-61.el9_2.2 |
| Red Hat rhel eus 9.2 | grub2-tools-efi | 1:2.06-61.el9_2.2 |
| Red Hat rhel eus 9.2 | grub2-tools-efi-debuginfo | 1:2.06-61.el9_2.2 |
| Red Hat rhel eus 9.2 | grub2-tools-extra | 1:2.06-61.el9_2.2 |
| Red Hat rhel eus 9.2 | grub2-tools-extra-debuginfo | 1:2.06-61.el9_2.2 |
| Red Hat rhel eus 9.2 | grub2-tools-minimal | 1:2.06-61.el9_2.2 |
| Red Hat rhel eus 9.2 | grub2-tools-minimal-debuginfo | 1:2.06-61.el9_2.2 |
| Ubuntu Pro 14.04 LTS | grub2-signed | no fix |