CVE-2015-5281: The grub2 package before 2.02-0.29 in Red Hat Enterprise Linux (RHEL) 7, when used on UEFI systems, allows...

Security readout for executives and security teams

CVE-2015-5281 is a Secure Boot bypass in Red Hat Enterprise Linux 7 grub2 on UEFI systems. A local user or someone with physical access could make the system run code that Secure Boot was intended to block. There is no KEV listing or source evidence here of active exploitation. Exposure is most likely on RHEL 7 UEFI systems using affected grub2 packages and relying on Secure Boot as a trust boundary. Risk is higher for shared-administration hosts, laptops, kiosks, or servers where physical console access is plausible. Prioritize remediation where Secure Boot is part of compliance, endpoint protection, or tamper-resistance assumptions. This is not evidenced as internet-remote or actively exploited, but it weakens a key platform security control. Mitigation focus: Apply vendor grub2 updates, including Red Hat 2.02-0.29 or later where applicable.; Review Red Hat, Fedora, and Oracle advisories for distribution-specific fixed packages.; Restrict physical console access to systems that rely on Secure Boot..

Prepared

Jun 13, 2026, 21:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.