Security Advisory

CVE-2024-23301

5.5
MEDIUM

Vulnerability Description

Relax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y. This allows local attackers to gain access to system secrets otherwise only readable by root.
Published Date January 12, 2024
Official Source NIST NVD Advisory