How severe is CVE-2025-0622?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 6.4 out of 10.

What type of vulnerability is CVE-2025-0622?

This is classified as CWE-416, which is a common weakness in software security.

CVE-2025-0622 - MEDIUM Severity | CVSS 6.4

Vulnerability Description

A flaw was found in command/gpg. In some scenarios, hooks created by loaded modules are not removed when the related module is unloaded. This flaw allows an attacker to force grub2 to call the hooks once the module that registered it was unloaded, leading to a use-after-free vulnerability. If correctly exploited, this vulnerability may result in arbitrary code execution, eventually allowing the attacker to bypass secure boot protections.

Related Vulnerabilities

CVE-2019-15214

MEDIUM

CVSS:6.4(Medium)

An issue was discovered in the Linux kernel before 5.0.10. There is a use-after-free in the sound subsystem because card disconnection causes certain data structures to be deleted too early. This is r...

CWE-4162019

CVE-2020-10690

MEDIUM

CVSS:6.4(Medium)

There is a use-after-free in kernel versions before 5.5 due to a race condition between the release of ptp_clock and cdev while resource deallocation. When a (high privileged) process allocates a ptp ...

CWE-4162020

CVE-2021-25394

MEDIUM

CVSS:6.4(Medium)

A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised.

CWE-4162021

CVE-2021-29093

MEDIUM

CVSS:6.4(Medium)

A use-after-free vulnerability when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 (and earlier) allows an authenticated attacker with specialized permissions to achieve arbitrary code ...

CWE-4162021

CVE-2021-3700

MEDIUM

CVSS:6.4(Medium)

A use-after-free vulnerability was found in usbredir in versions prior to 0.11.0 in the usbredirparser_serialize() in usbredirparser/usbredirparser.c. This issue occurs when serializing large amounts ...

CWE-4162021

CVE-2022-4382

MEDIUM

CVSS:6.4(Medium)

A use-after-free flaw caused by a race among the superblock operations in the gadgetfs Linux driver was found. It could be triggered by yanking out a device that is running the gadgetfs side.

CWE-4162022