Vulnerability CVE-2024-23301
Published: 2024-01-12   Modified: 2024-01-13

Description:
Relax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y. This allows local attackers to gain access to system secrets otherwise only readable by root.

 References:
https://github.com/rear/rear/issues/3122
https://github.com/rear/rear/pull/3123
Copyright 2026, cxsecurity.com

 

Back to Top