1 matches found
AZL-44403 CVE-2024-23301 affecting package rear 2.4-7
Relax-and-Recover aka ReaR through 2.7 creates a world-readable initrd when using GRUBRESCUE=y. This allows local attackers to gain access to system secrets otherwise only readable by root...