GRUB2 (commands/gpg): Module unload leaves registered hooks behind, so GRUB later calls through freed function pointers

Impact

Module unload leaves registered hooks behind, so GRUB later calls through freed function pointers. Notable because the affected module is the one meant to verify signatures - the bug is in the verification machinery itself.

Who can reach it

Local, via GRUB command sequences or grub.cfg.

What to do

grub2 package update + reboot. Part of the same February 2025 distro update as the rest of the batch.

References