Security update for grub2

Announcement ID:	SUSE-SU-2025:4196-1
Release Date:	2025-11-24T10:54:35Z
Rating:	moderate
References:	bsc#1236744 bsc#1241132 bsc#1245953 bsc#1252269 bsc#1252930 bsc#1252931 bsc#1252932 bsc#1252933 bsc#1252934 bsc#1252935
Cross-References:	CVE-2025-54770 CVE-2025-54771 CVE-2025-61661 CVE-2025-61662 CVE-2025-61663 CVE-2025-61664
CVSS scores:	CVE-2025-54770 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N CVE-2025-54770 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L CVE-2025-54770 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L CVE-2025-54771 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N CVE-2025-54771 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L CVE-2025-54771 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L CVE-2025-61661 ( SUSE ): 4.3 CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N CVE-2025-61661 ( SUSE ): 4.8 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H CVE-2025-61661 ( NVD ): 4.8 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H CVE-2025-61662 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N CVE-2025-61662 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L CVE-2025-61662 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L CVE-2025-61663 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N CVE-2025-61663 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L CVE-2025-61663 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L CVE-2025-61664 ( SUSE ): 2.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N CVE-2025-61664 ( SUSE ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L CVE-2025-61664 ( NVD ): 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected Products:	Basesystem Module 15-SP6 openSUSE Leap 15.6 Server Applications Module 15-SP6 SUSE Linux Enterprise Desktop 15 SP6 SUSE Linux Enterprise Real Time 15 SP6 SUSE Linux Enterprise Server 15 SP6 SUSE Linux Enterprise Server for SAP Applications 15 SP6

An update that solves six vulnerabilities and has four security fixes can now be installed.

Description:

This update for grub2 fixes the following issues:

• CVE-2025-54770: Fixed missing unregister call for net_set_vlan command may lead to use-after-free (bsc#1252930)
• CVE-2025-54771: Fixed rub_file_close() does not properly controls the fs refcount (bsc#1252931)
• CVE-2025-61661: Fixed out-of-bounds write in grub_usb_get_string() function (bsc#1252932)
• CVE-2025-61662: Fixed missing unregister call for gettext command may lead to use-after-free (bsc#1252933)
• CVE-2025-61663: Fixed missing unregister call for normal commands may lead to use-after-free (bsc#1252934)
• CVE-2025-61664: Fixed missing unregister call for normal_exit command may lead to use-after-free (bsc#1252935)

Other fixes:

• Bump upstream SBAT generation to 6
• Fix timeout when loading initrd via http after PPC CAS reboot (bsc#1245953)
• Fix PPC CAS reboot failure work when initiated via submenu (bsc#1241132)
• Fix out of memory issue on PowerPC by increasing RMA size (bsc#1236744, bsc#1252269)

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

• openSUSE Leap 15.6
  zypper in -t patch SUSE-2025-4196=1 openSUSE-SLE-15.6-2025-4196=1
• Basesystem Module 15-SP6
  zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-4196=1
• Server Applications Module 15-SP6
  zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2025-4196=1

Package List:

• openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586)
  • grub2-2.12-150600.8.44.2
  • grub2-debuginfo-2.12-150600.8.44.2
  • grub2-branding-upstream-2.12-150600.8.44.2
• openSUSE Leap 15.6 (aarch64 s390x x86_64 i586)
  • grub2-debugsource-2.12-150600.8.44.2
• openSUSE Leap 15.6 (noarch)
  • grub2-i386-xen-2.12-150600.8.44.2
  • grub2-arm64-efi-extras-2.12-150600.8.44.2
  • grub2-snapper-plugin-2.12-150600.8.44.2
  • grub2-i386-pc-debug-2.12-150600.8.44.2
  • grub2-i386-efi-2.12-150600.8.44.2
  • grub2-systemd-sleep-plugin-2.12-150600.8.44.2
  • grub2-x86_64-xen-debug-2.12-150600.8.44.2
  • grub2-x86_64-xen-2.12-150600.8.44.2
  • grub2-powerpc-ieee1275-extras-2.12-150600.8.44.2
  • grub2-x86_64-efi-2.12-150600.8.44.2
  • grub2-i386-efi-debug-2.12-150600.8.44.2
  • grub2-i386-pc-extras-2.12-150600.8.44.2
  • grub2-powerpc-ieee1275-2.12-150600.8.44.2
  • grub2-x86_64-efi-debug-2.12-150600.8.44.2
  • grub2-i386-pc-2.12-150600.8.44.2
  • grub2-x86_64-xen-extras-2.12-150600.8.44.2
  • grub2-i386-xen-debug-2.12-150600.8.44.2
  • grub2-x86_64-efi-extras-2.12-150600.8.44.2
  • grub2-powerpc-ieee1275-debug-2.12-150600.8.44.2
  • grub2-i386-xen-extras-2.12-150600.8.44.2
  • grub2-s390x-emu-extras-2.12-150600.8.44.2
  • grub2-arm64-efi-2.12-150600.8.44.2
  • grub2-arm64-efi-debug-2.12-150600.8.44.2
  • grub2-i386-efi-extras-2.12-150600.8.44.2
• openSUSE Leap 15.6 (s390x)
  • grub2-s390x-emu-debug-2.12-150600.8.44.2
  • grub2-s390x-emu-2.12-150600.8.44.2
• Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64)
  • grub2-2.12-150600.8.44.2
  • grub2-debuginfo-2.12-150600.8.44.2
• Basesystem Module 15-SP6 (noarch)
  • grub2-i386-pc-2.12-150600.8.44.2
  • grub2-systemd-sleep-plugin-2.12-150600.8.44.2
  • grub2-arm64-efi-2.12-150600.8.44.2
  • grub2-snapper-plugin-2.12-150600.8.44.2
  • grub2-x86_64-efi-2.12-150600.8.44.2
  • grub2-powerpc-ieee1275-2.12-150600.8.44.2
• Basesystem Module 15-SP6 (aarch64 s390x x86_64)
  • grub2-debugsource-2.12-150600.8.44.2
• Basesystem Module 15-SP6 (s390x)
  • grub2-s390x-emu-2.12-150600.8.44.2
• Server Applications Module 15-SP6 (noarch)
  • grub2-x86_64-xen-2.12-150600.8.44.2

References:

• https://www.suse.com/security/cve/CVE-2025-54770.html
• https://www.suse.com/security/cve/CVE-2025-54771.html
• https://www.suse.com/security/cve/CVE-2025-61661.html
• https://www.suse.com/security/cve/CVE-2025-61662.html
• https://www.suse.com/security/cve/CVE-2025-61663.html
• https://www.suse.com/security/cve/CVE-2025-61664.html
• https://bugzilla.suse.com/show_bug.cgi?id=1236744
• https://bugzilla.suse.com/show_bug.cgi?id=1241132
• https://bugzilla.suse.com/show_bug.cgi?id=1245953
• https://bugzilla.suse.com/show_bug.cgi?id=1252269
• https://bugzilla.suse.com/show_bug.cgi?id=1252930
• https://bugzilla.suse.com/show_bug.cgi?id=1252931
• https://bugzilla.suse.com/show_bug.cgi?id=1252932
• https://bugzilla.suse.com/show_bug.cgi?id=1252933
• https://bugzilla.suse.com/show_bug.cgi?id=1252934
• https://bugzilla.suse.com/show_bug.cgi?id=1252935