The 28-Backspace Linux GRUB Vulnerability (2015)

In December 2015, cybersecurity researchers Hector Marco and Ismael Ripoll from the Universitat Politècnica de València disclosed a surprisingly simple vulnerability in the GNU GRUB2 bootloader: pressing the backspace key exactly 28 times at the login prompt could grant root-level access to a locked Linux system.

An Integer Underflow in Memory

The flaw had existed in GRUB code since version 1.98 (released in December 2009) through version 2.02. When a user pressed backspace 28 consecutive times on an authenticated boot prompt, an integer underflow error corrupted memory structures in the bootloader. This caused the system to abort password validation and drop directly into the powerful GRUB rescue shell.

Physical Security Realities

From the rescue shell, an attacker with physical machine access could read unencrypted hard drives, deploy malware from a connected USB drive, or overwrite system partition tables. The researchers published remediation patches immediately, reminding systems administrators that physical access combined with bootloader bugs can undermine higher-level operating system security.