VDB
RHSA-2026:14773
RHSA-2026:14773
PUBLISHED
CVSS 5.300000190734863 MEDIUM
A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a programming error where the gettext command remains registered in memory after its module is unloaded. An attacker can exploit this condition by invoking the orphaned command, causing the application to access a memory location that is no longer valid. An attacker could exploit this vulnerability to cause grub to crash, leading to a Denial of Service. Possible data integrity or confidentiality compromise is not discarded.
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | rhcos-aarch64-415.92.202605060220-0 as a component of Red Hat OpenShift Container Platform 4.15 | 415.92.202605060220-0, 415.92.202605060220-0, 415.92.202605060220-0 |
| Red Hat | OpenShift Container Platform 4.15 | |
| Red Hat | rhcos-ppc64le-415.92.202605060220-0 as a component of Red Hat OpenShift Container Platform 4.15 | 415.92.202605060220-0, 415.92.202605060220-0, 415.92.202605060220-0 |
| Red Hat | rhcos-s390x-415.92.202605060220-0 as a component of Red Hat OpenShift Container Platform 4.15 | 415.92.202605060220-0, 415.92.202605060220-0, 415.92.202605060220-0 |
| Red Hat | rhcos-x86_64-415.92.202605060220-0 as a component of Red Hat OpenShift Container Platform 4.15 | 415.92.202605060220-0, 415.92.202605060220-0, 415.92.202605060220-0 |
Timeline
- Apr 30, 2026 PoC Published
- May 13, 2026 CVE Published
- Oct 13, 2026 CVE Updated
- Oct 13, 2026 Distribution Patch
- Oct 13, 2026 Distribution Patch
- Oct 13, 2026 Security Advisory
- Oct 13, 2026 Security Advisory
- Oct 13, 2026 Security Advisory
- Oct 13, 2026 Security Advisory
- Oct 13, 2026 Security Advisory
- Oct 13, 2026 Security Advisory
- Oct 13, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:14773 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2414683 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2430386 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2437843 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2438542 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2443455 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2443474 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2446453 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2447085 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2448754 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2449006 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2450907 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2452945 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2460538 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_14773.json advisory
- https://access.redhat.com/security/cve/CVE-2025-61662 advisory
- https://www.cve.org/CVERecord?id=CVE-2025-61662 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-61662 advisory
- https://lists.gnu.org/archive/html/grub-devel/2025-11/msg00155.html advisory
…and 69 more