CVE-2024-1048

    Dashboard / Vulnerabilities / CVE-2024-1048

    CVE-2024-1048

    Published: 6 Feb 2024Last Modified: 14 Mar 2026

    Summary:

    Details: A flaw was found in the grub2-set-bootflag utility of grub2. After the fix of CVE-2019-14865, grub2-set-bootflag will create a temporary file with the new grubenv content and rename it to the original grubenv file. If the program is killed before the rename operation, the temporary file will not be removed and may fill the filesystem when invoked multiple times, resulting in a filesystem out of free inodes or blocks.

    References: http://www.openwall.com/lists/oss-security/2024/02/06/3, https://lists.fedoraproject.org/archives/list/[email protected]/message/XRZQCVZ3XOASVFT6XLO7F2ZXOLOHIJZQ/, https://lists.fedoraproject.org/archives/list/[email protected]/message/YSJAEGRR3XHMBBBKYOVMII4P34IXEYPE/, https://www.openwall.com/lists/oss-security/2024/02/06/3, https://security.netapp.com/advisory/ntap-20240223-0007/, https://access.redhat.com/errata/RHSA-2024:2456, https://access.redhat.com/errata/RHSA-2024:3184, https://access.redhat.com/security/cve/CVE-2024-1048, https://bugzilla.redhat.com/show_bug.cgi?id=2256827

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: N/A

    Events:

    Introduced- None
    Fixed -None

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2024-1048 | CVE-DB