]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commit
grub2: fix CVE-2024-56738
authorRoss Burton <ross.burton@arm.com>
Fri, 19 Sep 2025 07:45:53 +0000 (13:15 +0530)
committerSteve Sakoman <steve@sakoman.com>
Mon, 22 Sep 2025 19:41:26 +0000 (12:41 -0700)
commitf346b4e49a20023028238a810e0597b1c9f38d62
treec4c1d44b24ba35aed098baa1646667a84f2d72d4
parent3d161e94ad532f660d4a0259a32e26a32ea0c75d
grub2: fix CVE-2024-56738

Backport an algorithmic change to grub_crypto_memcmp() so that it
completes in constant time and thus isn't susceptible to side-channel
attacks.

(From OE-Core rev: 30a1cc225a2bd5d044bf608d863a67df3f9c03be)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/recipes-bsp/grub/files/CVE-2024-56738.patch [new file with mode: 0644]
meta/recipes-bsp/grub/grub2.inc