VulnSocial

CVE-2022-2601Disclosure(fedoraproject / enterprise_linux_eus)

LOWCVSS 8.6 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A buffer overflow was found in grub_font_construct_glyph(). A malicious crafted pf2 font can lead to an overflow when calculating the max_glyph_size value, allocating a smaller than needed buffer for the glyph, this further leads to a buffer overflow and a heap based out-of-bounds write. An attacker may use this vulnerability to circumvent the secure boot mechanism.

fedoraproject CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-122CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • enterprise_linux_eus
  • enterprise_linux_for_power_little_endian_eus
  • enterprise_linux_server_aus
  • enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
fedoraprojectgnuredhat
Products
enterprise_linux_eusenterprise_linux_for_power_little_endian_eusenterprise_linux_server_ausenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutionsenterprise_linux_server_tusenterprise_linux_server_update_services_for_sap_solutionsfedoragrub2

4 versions affected across 8 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-06-01: 1Technical Details · 2026-06-01: 106-01
Signal classification1 categories
Disclosure
1100.0%
Full discourse1 post
  • DFIR Lab@DFIR_Lab
    Disclosure

    🚨 HIGH SEVERITY: CVE-2022-2601 (CVSS 8.6) Buffer overflow in GRUB bootloader's grub_font_construct_glyph(). Malicious pf2 fonts can bypass Secure Boot. Affected: GRUB bootloader Impact: Secure Boot circumvention #CVE #Vulnerability #PatchNow https://t.co/qCfD6QQu5F

    Post summary

    The tweet announces CVE-2022-2601, a buffer overflow in GRUB that can bypass Secure Boot, noting its high severity but providing no exploit or patch information.

    0000035
    35 followersView on X
CPE platform detail12 entries

12 of 12 entries

PartVendorProductVersionTarget SWTarget HW
OSfedoraprojectfedora37--
Appgnugrub2---
OSredhatenterprise_linux_eus9.0--
OSredhatenterprise_linux_for_power_little_endian_eus9.0--
OSredhatenterprise_linux_server_aus8.2--
OSredhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions8.1--
OSredhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions8.2--
OSredhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions9.0--
OSredhatenterprise_linux_server_tus8.2--
OSredhatenterprise_linux_server_update_services_for_sap_solutions8.1--
OSredhatenterprise_linux_server_update_services_for_sap_solutions8.2--
OSredhatenterprise_linux_server_update_services_for_sap_solutions9.0--

Explore more

Back to dashboardfedoraproject CVEsgnu CVEsredhat CVEsenterprise_linux_eus vulnerabilities