CVE-2021-3981

A flaw in grub2 was found where its configuration file, known as grub.cfg, is being created with the wrong permission set allowing non privileged users to read its content. This represents a low severity confidentiality issue, as those users can eventually read any encrypted passwords present in grub.cfg. This flaw affects grub2 2.06 and previous versions. This issue has been fixed in grub upstream but no version with the fix is currently released.

• CWE-276
• CWE-276

• http://www.openwall.com/lists/oss-security/2024/01/15/3
• https://bugzilla.redhat.com/show_bug.cgi?id=2024170Issue Tracking, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AI776L35DDYPCSAAJPJM3ZEQYSFZHBJX/
• https://security.gentoo.org/glsa/202209-12Third Party Advisory
• http://www.openwall.com/lists/oss-security/2024/01/15/3
• https://bugzilla.redhat.com/show_bug.cgi?id=2024170Issue Tracking, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AI776L35DDYPCSAAJPJM3ZEQYSFZHBJX/
• https://security.gentoo.org/glsa/202209-12Third Party Advisory

Published

Mar 10, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-39804In reinit of HeifDecoderImpl.cpp, there is a possible crash …6.5
• CVE-2021-39805In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible…6.5
• CVE-2021-39806In closef of label_backends_android.c, there is a possible w…7.8
• CVE-2021-39807In handleNfcStateChanged of SecureNfcEnabler.java, there is …7.8
• CVE-2021-39808In createNotificationChannelGroup of PreferencesHelper.java,…7.8
• CVE-2021-39809In avrc_ctrl_pars_vendor_rsp of avrc_pars_ct.cc, there is a …7.5
• CVE-2021-39810In verifyDefaults of CardEmulationManager.java, there is a p…7.8
• CVE-2021-39812In TBD of TBD, there is a possible out of bounds read due to…7.8
• CVE-2021-39814In ppmp_validate_wsm of drm_fw.c, there is a possible out of…6.7
• CVE-2021-39815The PowerVR GPU driver allows unprivileged apps to allocated…9.8
• CVE-2021-39816Adobe Bridge version 11.1 (and earlier) is affected by a mem…7.8
• CVE-2021-39817Adobe Bridge version 11.1 (and earlier) is affected by a mem…7.8