{"id":149133,"date":"2025-11-21T17:11:55","date_gmt":"2025-11-21T15:11:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/6-uyazvimostej-v-zagruzchike-grub2-pozvolyayushhih-obojti-uefi-secure-boot"},"modified":"2025-11-21T17:11:55","modified_gmt":"2025-11-21T15:11:55","slug":"6-uyazvimostej-v-zagruzchike-grub2-pozvolyayushhih-obojti-uefi-secure-boot","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/news\/6-uyazvimostej-v-zagruzchike-grub2-pozvolyayushhih-obojti-uefi-secure-boot","title":{"rendered":"6 podatno\u015bci w bootloaderze GRUB2, pozwalaj\u0105cych na obej\u015bcie UEFI Secure Boot","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Opublikowano zestaw poprawek usuwaj\u0105cych 6 podatno\u015bci w bootloaderze GRUB2, z kt\u00f3rych wi\u0119kszo\u015b\u0107 prowadzi do dost\u0119pu do pami\u0119ci po jej zwolnieniu (use-after-free). Potencjalnie odkryte problemy mog\u0105 by\u0107 wykorzystywane do obej\u015bcia mechanizmu weryfikacji uruchamiania UEFI Secure Boot. Status usuni\u0119cia podatno\u015bci w dystrybucjach mo\u017cna oceni\u0107 na stronach: Debian, Ubuntu, SUSE, RHEL, Arch i Fedora. Aby usun\u0105\u0107 problemy w GRUB2, nie wystarczy jedynie zaktualizowa\u0107 pakiet, nale\u017cy r\u00f3wnie\u017c utworzy\u0107 nowe wewn\u0119trzne cyfrowe podpisy i aktualizowa\u0107 instalatory, bootloadery, pakiety j\u0105dra, firmware fwupd oraz warstw\u0119 shim.         <\/p>\n<p>Zidentyfikowane luki:  <\/p>\n<ul>\n<li class=\"l\"> CVE-2025-61661 \u2014 zapis poza przydzielonym buforem w funkcji grub_usb_get_string(), kt\u00f3ra mo\u017ce by\u0107 wykorzystywana podczas przetwarzania \u0142a\u0144cuch\u00f3w w kodowaniach UTF-8 i UTF-16, przesy\u0142anych podczas pod\u0142\u0105czania urz\u0105dze\u0144 USB. Problem wynika z tego, \u017ce bufor by\u0142 przydzielany na podstawie rozmiaru \u0142a\u0144cucha podanego w pierwszym komunikacie od urz\u0105dzenia USB, podczas gdy rozmiar przy konwersji kodowania obliczano na podstawie p\u00f3\u017aniejszych operacji odczytu z urz\u0105dzenia USB. W zwi\u0105zku z tym do ataku mo\u017cna u\u017cy\u0107 zmodyfikowanego urz\u0105dzenia USB, kt\u00f3re pierwotnie zwraca zani\u017con\u0105 warto\u015b\u0107 rozmiaru.\n<li class=\"l\"> CVE-2025-61663, CVE-2025-61664, CVE-2025-54770, CVE-2025-61662 \u2014 brak czyszczenia obs\u0142ugiwaczy polece\u0144 \u00abnormal\u00bb, \u00abnormal_exit\u00bb, \u00abnet_set_vlan\u00bb i \u00abgettext\u00bb podczas wy\u0142adowania modu\u0142\u00f3w \u00abnormal\u00bb, \u00abnet\u00bb i \u00abgettext\u00bb, co stwarza warunki do dost\u0119pu do pami\u0119ci po jej zwolnieniu (use-after-free) w przypadku wykonania oznaczonych polece\u0144 po wy\u0142adowaniu odpowiadaj\u0105cych modu\u0142\u00f3w. Podobne podatno\u015bci zosta\u0142y r\u00f3wnie\u017c znalezione dla polece\u0144 \u00abfunctional_test\u00bb i \u00aball_functional_test\u00bb, ale nie przypisano im identyfikator\u00f3w CVE, poniewa\u017c polecenia te s\u0105 cz\u0119\u015bci\u0105 biblioteki testowej i nie powinny by\u0107 uwzgl\u0119dniane w wersjach produkcyjnych.\n<li class=\"l\"> CVE-2025-54771 \u2014 b\u0142\u0105d przy liczeniu referencji do struktur \u00abfs\u00bb w funkcji grub_file_close(), prowadz\u0105cy do dost\u0119pu do pami\u0119ci po jej zwolnieniu (use-after-free).        <\/ul>\n<p>W wi\u0119kszo\u015bci dystrybucji Linuxa do weryfikacji rozruchu w trybie UEFI Secure Boot u\u017cywana jest ma\u0142a warstwa shim, opatentowana cyfrowym podpisem Microsoft. Ta warstwa weryfikuje GRUB2 w\u0142asnym certyfikatem, co pozwala deweloperom dystrybucji nie opatrywa\u0107 ka\u017cdym aktualizacj\u0105 j\u0105dra i GRUB w Microsoft. W vulnerabilno\u015bci w GRUB2 pozwalaj\u0105 na wykonanie w\u0142asnego kodu na etapie po udanej weryfikacji shim, ale przed za\u0142adowaniem systemu operacyjnego, wbijaj\u0105c si\u0119 w \u0142a\u0144cuch zaufania przy aktywnym trybie Secure Boot i uzyskuj\u0105c pe\u0142n\u0105 kontrol\u0119 nad dalszym procesem \u0142adowania, na przyk\u0142ad, aby za\u0142adowa\u0107 inny system operacyjny, zmodyfikowa\u0107 komponenty systemu operacyjnego i obej\u015b\u0107 zabezpieczenia Lockdown.     <\/p>\n<p>Aby zablokowa\u0107 podatno\u015b\u0107 bez wycofywania cyfrowego podpisu, dystrybucje mog\u0105 wykorzysta\u0107 mechanizm SBAT (UEFI Secure Boot Advanced Targeting), kt\u00f3rego wsparcie zosta\u0142o wdro\u017cone dla GRUB2, shim i fwupd w wi\u0119kszo\u015bci popularnych dystrybucji Linux. SBAT zosta\u0142 zaprojektowany wsp\u00f3lnie z Microsoftem i zak\u0142ada dodanie do wykonywalnych plik\u00f3w komponent\u00f3w UEFI dodatkowych metadanych, kt\u00f3re zawieraj\u0105 informacje o producencie, produkcie, komponencie i wersji. Podane metadane s\u0105 podpisywane cyfrowym podpisem i mog\u0105 by\u0107 osobno do\u0142\u0105czane do list dozwolonych lub zabronionych komponent\u00f3w dla UEFI Secure Boot.      <\/p>\n<p>SBAT pozwala zablokowa\u0107 u\u017cycie cyfrowego podpisu dla poszczeg\u00f3lnych numer\u00f3w wersji komponent\u00f3w bez konieczno\u015bci wycofywania kluczy dla Secure Boot. Blokowanie podatno\u015bci przez SBAT nie wymaga korzystania z listy wycofanych certyfikat\u00f3w UEFI (dbx), a odbywa si\u0119 na poziomie zast\u0105pienia wewn\u0119trznego klucza do formowania podpis\u00f3w i aktualizacji GRUB2, shim i innych dostarczanych przez dystrybucje artefakt\u00f3w rozruchowych. Do wprowadzenia SBAT, aktualizacja listy wycofanych certyfikat\u00f3w (dbx, UEFI Revocation List) by\u0142a obowi\u0105zkowym warunkiem pe\u0142nego zablokowania podatno\u015bci, poniewa\u017c atakuj\u0105cy, niezale\u017cnie od u\u017cywanego systemu operacyjnego, m\u00f3g\u0142 do skompromitowania UEFI Secure Boot u\u017cy\u0107 no\u015bnika rozruchowego ze starsz\u0105 podatn\u0105 wersj\u0105 GRUB2, opatentowan\u0105 cyfrowym podpisem.<br \/>\n<br \/>\u0179r\u00f3d\u0142o: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=64298\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043d\u0430\u0431\u043e\u0440 \u043f\u0430\u0442\u0447\u0435\u0439 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c 6 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f (use-after-free). \u041f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 UEFI Secure Boot. \u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 \u043c\u043e\u0436\u043d\u043e \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u0445: Debian, Ubuntu, SUSE, RHEL, Arch \u0438 Fedora. \u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-149133","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043d\u0430\u0431\u043e\u0440 \u043f\u0430\u0442\u0447\u0435\u0439 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c 6 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f (use-after-free).\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/pl\/blog\/news\/6-uyazvimostej-v-zagruzchike-grub2-pozvolyayushhih-obojti-uefi-secure-boot\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"pl_PL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd476 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043e\u0431\u043e\u0439\u0442\u0438 UEFI Secure Boot | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043d\u0430\u0431\u043e\u0440 \u043f\u0430\u0442\u0447\u0435\u0439 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c 6 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f (use-after-free).\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/pl\/blog\/news\/6-uyazvimostej-v-zagruzchike-grub2-pozvolyayushhih-obojti-uefi-secure-boot\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2025-11-21T15:11:55+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2025-11-21T15:11:55+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd476 podatno\u015bci w bootloaderze GRUB2, kt\u00f3re umo\u017cliwiaj\u0105 obej\u015bcie UEFI Secure Boot | ProHoster","description":"Opublikowano zestaw poprawek usuwaj\u0105cych 6 podatno\u015bci w bootloaderze GRUB2, z kt\u00f3rych wi\u0119kszo\u015b\u0107 prowadzi do dost\u0119pu do pami\u0119ci po jej zwolnieniu (use-after-free).","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/news\/6-uyazvimostej-v-zagruzchike-grub2-pozvolyayushhih-obojti-uefi-secure-boot","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd476 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043e\u0431\u043e\u0439\u0442\u0438 UEFI Secure Boot | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043d\u0430\u0431\u043e\u0440 \u043f\u0430\u0442\u0447\u0435\u0439 \u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c 6 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 GRUB2, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u043e\u0441\u043b\u0435 \u0435\u0451 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f (use-after-free).","og:url":"https:\/\/prohoster.info\/pl\/blog\/news\/6-uyazvimostej-v-zagruzchike-grub2-pozvolyayushhih-obojti-uefi-secure-boot","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-11-21T15:11:55+00:00","article:modified_time":"2025-11-21T15:11:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"149133","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 16:09:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 16:09:19","updated":"2026-01-23 16:09:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/149133","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=149133"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/149133\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=149133"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=149133"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=149133"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}