CVE-2021-46705: GNU GRUB2

Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days.

A Insecure Temporary File vulnerability in grub-once of grub2 in SUSE Linux Enterprise Server 15 SP4, openSUSE Factory allows local attackers to truncate arbitrary files. This issue affects: SUSE Linux Enterprise Server 15 SP4 grub2 versions prior to 2.06-150400.7.1. SUSE openSUSE Factory grub2 versions prior to 2.06-18.1.

Affected products

• GNU GRUB2: before 2.06-150400.7.1 (fixed in 2.06-150400.7.1); before 2.06-18.1 (fixed in 2.06-18.1)

Published 2022-03-16. Last modified 2026-06-17.