CVE-2024-23301

Relax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y. This allows local attackers to gain access to system secrets otherwise only readable by root.
CVSS

No CVSS.

Configurations

No configuration.

Information

Published : 2024-01-12 23:15

Updated : 2024-01-12 23:15


NVD link : CVE-2024-23301

Mitre link : CVE-2024-23301


JSON object : View

Products Affected

No product.

CWE

No CWE.