CVE-2020-25632

A flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the unloading of a module used as a dependency without checking if any other dependent module is still loaded leading to a use-after-free scenario. This could allow arbitrary code to be executed or a bypass of Secure Boot protections. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

• CWE-416
• CWE-416

• https://bugzilla.redhat.com/show_bug.cgi?id=1879577Issue Tracking, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZWZ36QK4IKU6MWDWNOOWKPH3WXZBHT2R/
• https://security.gentoo.org/glsa/202104-05Third Party Advisory
• https://security.netapp.com/advisory/ntap-20220325-0001/Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1879577Issue Tracking, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZWZ36QK4IKU6MWDWNOOWKPH3WXZBHT2R/
• https://security.gentoo.org/glsa/202104-05Third Party Advisory
• https://security.netapp.com/advisory/ntap-20220325-0001/Third Party Advisory

Published

Mar 3, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-25627The moodlenetprofile user profile field required extra sanit…6.1
• CVE-2020-25628The filter in the tag manager required extra sanitizing to p…6.1
• CVE-2020-25629A vulnerability was found in Moodle where users with "Log in…8.8
• CVE-2020-2563Vulnerability in the Hyperion Financial Close Management pro…4.2
• CVE-2020-25630A vulnerability was found in Moodle where the decompressed s…7.5
• CVE-2020-25631A vulnerability was found in Moodle 3.9 to 3.9.1, 3.8 to 3.8…6.1
• CVE-2020-25633A flaw was found in RESTEasy client in all versions of RESTE…5.3
• CVE-2020-25634A flaw was found in Red Hat 3scale’s API docs URL, where it …5.4
• CVE-2020-25635A flaw was found in Ansible Base when using the aws_ssm conn…5.5
• CVE-2020-25636A flaw was found in Ansible Base when using the aws_ssm conn…7.1
• CVE-2020-25637A double free memory issue was found to occur in the libvirt…6.7
• CVE-2020-25638A flaw was found in hibernate-core in versions prior to and …7.4