[Bug 2054127] Re: grub-efi crashes upon `exit`

[Julian Andres Klode]

** Also affects: grub2-unsigned (Ubuntu Mantic)
   Importance: Undecided
       Status: New

** Also affects: grub2-unsigned (Ubuntu Noble)
   Importance: Medium
     Assignee: Mate Kukri (mkukri)
       Status: Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to grub2-unsigned in Ubuntu.
https://bugs.launchpad.net/bugs/2054127

Title:
  grub-efi crashes upon `exit`

Status in grub2-unsigned package in Ubuntu:
  Fix Committed
Status in grub2-unsigned source package in Mantic:
  New
Status in grub2-unsigned source package in Noble:
  Fix Committed
Status in grub2 package in Debian:
  New

Bug description:
  [Impact]

  Signed grub2 binaries in Ubuntu Mantic are affected by CVE-2024-2312.
  Please see details below.

  [Test Plan]

  Make sure Ubuntu Mantic still boots with the new GRUB.

  [Where problems could occur]

  Not very likely, Ubuntu Mantic fix is a simple git revert of the
  faulty change.

  ================================================================================
  This was the original issue description, which is kept for reference.

  grub> exit
  !!!! X64 Exception Type - 06(#UD - Invalid Opcode)  CPU Apic ID - 00000000 !!!!
  RIP  - 000000005AE781A6, CS  - 0000000000000038, RFLAGS - 0000000000210202
  RAX  - 000000005C903E90, RCX - 000000005D93B918, RDX - 000000E8DB694800
  RBX  - 8000000000000001, RSP - 000000007EEF4AE8, RBP - 000000007EEF04A0
  RSI  - 000000007EF09440, RDI - 000000007F703B48
  R8   - 0000000000000000, R9  - 0000000000000000, R10 - 000000005C8F147C
  R11  - 000000005ABB1340, R12 - 0000000000000000, R13 - 000000005ADA7C13
  R14  - 000000005C8F15AB, R15 - 000000005C9040A0
  DS   - 0000000000000030, ES  - 0000000000000030, FS  - 0000000000000030
  GS   - 0000000000000030, SS  - 0000000000000030
  CR0  - 0000000080010033, CR2 - 0000000000000000, CR3 - 000000005EC01000
  CR4  - 0000000000000668, CR8 - 0000000000000000
  DR0  - 0000000000000000, DR1 - 0000000000000000, DR2 - 0000000000000000
  DR3  - 0000000000000000, DR6 - 00000000FFFF0FF0, DR7 - 0000000000000400
  GDTR - 000000005E9E0000 0000000000000047, LDTR - 0000000000000000
  IDTR - 000000005E39F018 0000000000000FFF,   TR - 0000000000000000
  FXSAVE_STATE - 000000007EEF4740
  !!!! Find image based on IP(0x5AE781A6) (No PDB)  (ImageBase=0000000054CDB000, EntryPoint=0000000055A70304) !!!!

  Exiting grub-efi causes my OVMF virtual machine to crash with the
  above error.

  The #UD likely comes from some global hook not being uninstalled.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2-unsigned/+bug/2054127/+subscriptions