]> dgit.raspbian.org Git - grub2.git/commit
projects / grub2.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 8cb8c84) | patch
commands/pgp: Unregister the "check_signatures" hooks on module unload
authorB Horn <b@horn.uk>
Fri, 1 Nov 2024 19:24:29 +0000 (19:24 +0000)
committerAurelien Jarno <aurel32@debian.org>
Thu, 30 Apr 2026 19:02:01 +0000 (21:02 +0200)
commitcc5cf64432cd3c83d79ef2d78c6a79e370f819f6
treea1ab313b7a1b06ecc8a7ebda686925408db4a2a7tree | snapshot
parent8cb8c8416450e6caa315ca565747c02339ee8a27commit | diff
commands/pgp: Unregister the "check_signatures" hooks on module unload

If the hooks are not removed they can be called after the module has
been unloaded leading to an use-after-free.

Fixes: CVE-2025-0622
Reported-by: B Horn <b@horn.uk>
Signed-off-by: B Horn <b@horn.uk>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>
Gbp-Pq: Topic cve-2025-jan
Gbp-Pq: Name commands-pgp-Unregister-the-check_signatures-hooks-on-mod.patch
grub-core/commands/pgp.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.