GRUB2 (JFS symlink handling): Symlink integer overflow in the JFS parser producing a heap out-of-bounds write

Impact

Symlink integer overflow in the JFS parser producing a heap out-of-bounds write.

Who can reach it

Attacker-supplied JFS image.

What to do

grub2 package update + reboot; or drop the unused module from the build.

References

Related entries

• GRUB2 (romfs symlink handling): Symlink integer overflow in the romfs parser producing a heap out-of-bounds writeCVE-2025-0686 · GRUB2 (romfs symlink handling)Medium
• GRUB2 (UDF filesystem parser): Heap buffer overflow in grub_udf_read_blockCVE-2025-0689 · GRUB2 (UDF filesystem parser)Medium
• GRUB2 (read command): Integer overflow in the read command's accumulator writes out of boundsCVE-2025-0690 · GRUB2 (read command)Medium
• GRUB2 (HFS filesystem parser): Integer overflow computing internal buffer sizes from HFS metadata, leading to a heapCVE-2025-1125 · GRUB2 (HFS filesystem parser)Medium
• Dell OMSA: authenticated SSRF lets a low-privileged user reach systems behind the agentCVE-2026-81443 · Dell OpenManage Server Administrator (SSRF, authenticated)Medium
• GNU GRUB 2 (serial command MMIO base address validation): GRUB's `serial` command accepts an MMIO base address withoutCVE-2026-97876 · GNU GRUB 2 (serial command MMIO base address validation)Medium