GHSA-9gmj-v2m8-qffv
GitHub Security Advisory
⚠ Unreviewed
MODERATE
Has CVE
Advisory Details
GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: August 9, 2025 6:30 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.