Thomas Frauendorfer | Miray Software c4fb4cbc94 kern/file: Call grub_dl_unref() after fs->fs_close() ...

With commit 16f196874 (kern/file: Implement filesystem reference
counting) files hold a reference to their file systems.

When closing a file in grub_file_close() we should not expect
file->fs to stay valid after calling grub_dl_unref() on file->fs->mod.
So, grub_dl_unref() should be called after file->fs->fs_close().

Fixes: CVE-2025-54771
Fixes: 16f196874 (kern/file: Implement filesystem reference counting)

Reported-by: Thomas Frauendorfer | Miray Software <tf@miray.de>
Signed-off-by: Thomas Frauendorfer | Miray Software <tf@miray.de>
Reviewed-by: Daniel Kiper <daniel.kiper@oracle.com>

2025-11-18 14:34:44 +01:00

..

arm

efi: Drop all uses of efi_call_XX() wrappers

2023-05-25 16:48:00 +02:00

arm64

kern/{arm64,loongarch64}/dl_helper: Use the correct format specifier for formatted output

2023-06-13 16:00:39 +02:00

coreboot

kern: Remove trailing whitespaces

2022-03-14 15:46:55 +01:00

efi

efi/sb: Add API for retrieving shim loader image handles

2025-07-11 17:46:19 +02:00

emu

tpm2_key_protector: Add grub-emu support

2024-11-28 21:50:56 +01:00

generic

rtc_get_time_ms.c (grub_rtc_get_time_ms): Avoid division by zero.

2015-01-21 17:42:14 +01:00

i386

kern/xen: Add Xen command line parsing

2025-09-04 14:34:31 +02:00

ia64

efi: Drop all uses of efi_call_XX() wrappers

2023-05-25 16:48:00 +02:00

ieee1275

kern/ieee1275/openfw: Add missing grub_strdup() failure checks

2025-11-18 12:49:31 +01:00

loongarch64

loongarch: Add ELF relocation types documentation and comments

2023-06-13 16:00:39 +02:00

mips

kern/mips/arc/init: Add missing grub_strdup() failure check

2025-11-18 12:49:31 +01:00

powerpc

powerpc/ieee1275: Read the db and dbx secure boot variables

2025-10-11 15:36:46 +02:00

riscv

kern/riscv/efi/init: Use time register in grub_efi_get_time_ms()

2024-10-10 12:13:37 +02:00

sparc64

i18n: Format large integers before the translation message

2021-04-13 17:16:04 +02:00

uboot

calloc: Use calloc() at most places

2020-07-29 16:55:47 +02:00

x86_64

efi: Remove x86_64 call wrappers

2023-05-25 16:48:00 +02:00

xen

kern/xen: Add Xen command line parsing

2025-09-04 14:34:31 +02:00

acpi.c

kern/acpi: Fix out of bounds access in grub_acpi_xsdt_find_table()

2024-10-31 16:04:00 +01:00

buffer.c

kern/buffer: Handle NULL input pointer in grub_buffer_free()

2022-10-27 16:51:21 +02:00

command.c

kern/command,commands/extcmd: Perform explicit NULL check in both the unregister helpers

2025-10-11 15:36:54 +02:00

compiler-rt.c

kern/misc: Implement faster grub_memcpy() for aligned buffers

2025-10-23 19:12:22 +02:00

corecmd.c

kern/corecmd: Quote variable values when displayed by the set command

2022-10-11 14:28:06 +02:00

device.c

kern: Check for NULL when closing devices and disks

2023-06-01 11:45:00 +02:00

disk_common.c

disk: Replace transform_sector() function with grub_disk_to_native_sector()

2023-04-13 15:04:33 +02:00

disk.c

kern/disk: Limit recursion depth

2025-01-23 16:22:47 +01:00

dl.c

kern/dl: Check for the SHF_INFO_LINK flag in grub_dl_relocate_symbols()

2025-02-13 15:45:55 +01:00

elf.c

elf: Validate number of elf program header table entries

2022-08-19 22:27:51 +02:00

elfXX.c

elf: Validate number of elf program header table entries

2022-08-19 22:27:51 +02:00

env.c

kern/env: Add function for retrieving variables as booleans

2022-11-14 17:21:53 +01:00

err.c

kern: Include function name on debug and error print functions

2025-10-11 15:36:53 +02:00

file.c

kern/file: Call grub_dl_unref() after fs->fs_close()

2025-11-18 14:34:44 +01:00

fs.c

kern/fs: Honour file->read_hook() in grub_fs_blocklist_read()

2024-11-28 20:23:15 +01:00

list.c

Remove prio_list.

2012-02-26 22:49:24 +01:00

lockdown.c

kern/efi/sb: Enforce verification of font files

2022-11-14 20:24:39 +01:00

main.c

disk/cryptodisk: Require authentication after TPM unlock for CLI access

2025-01-23 16:22:47 +01:00

misc.c

kern/misc: Add the "z" length modifier support

2025-10-23 19:15:00 +02:00

mm.c

commands/memtools: Add lsmemregions command

2025-10-24 19:39:51 +02:00

parser.c

kern/rescue_parser: Ensure that parser allocated memory is not leaked

2022-03-21 19:41:37 +01:00

partition.c

kern/partition: Unbreak support for nested partitions

2025-03-05 21:24:47 +01:00

rescue_parser.c

kern/rescue_parser: Ensure that parser allocated memory is not leaked

2022-03-21 19:41:37 +01:00

rescue_reader.c

kern/rescue_reader: Block the rescue mode until the CLI authentication

2025-05-06 17:13:00 +02:00

term.c

kern/term: Accept ESC, F4 and holding SHIFT as user interrupt keys

2020-04-21 22:13:44 +02:00

time.c

automake commit without merge history

2010-05-06 11:34:04 +05:30

verifiers.c

verifiers: Move verifiers API to kernel image

2021-03-02 15:54:15 +01:00

vga_init.c

* grub-core/kern/vga_init.c: Fix compilation on qemu-mips.

2013-08-14 09:50:57 +02:00