CVE-2024-56738

Published: Dec 29, 2024

Modified: Dec 31, 2024

PUBLISHED

GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for grub_crypto_memcmp and thus allows side-channel attacks.

Vendor	Product	Versions
GNU	GRUB2	affected `2.00 - <= 2.12`

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.