CVE:CVE-2022-2601
CNNVD:CNNVD-202211-2822
grub2是美国GNU社区的一款Linux系统引导程序。
grub2存在安全漏洞，该漏洞源于攻击者可以使用恶意制作的pf2字体实现越界写入导致内存损坏和安全引导规避。
solution:Upgrade gnu grub2 to a higher version than 2.06,and avoid the version (,2.06]; Upgrade fedoraproject fedora to a higher version than 37,and avoid the version 37; Upgrade redhat enterprise_linux_eus to a higher version than 9.0,and avoid the version 9.0; Upgrade redhat enterprise_linux_for_power_little_endian_eus to a higher version than 9.0,and avoid the version 9.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 8.2,and avoid the version 8.2; Upgrade redhat enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions to a higher version than 8.1,8.2,9.0,and avoid the version 8.1,8.2,9.0; Upgrade redhat enterprise_linux_server_tus to a higher version than 8.2,and avoid the version 8.2; Upgrade redhat enterprise_linux_server_update_services_for_sap_solutions to a higher version than 8.1,8.2,9.0,and avoid the version 8.1,8.2,9.0