231 matches found
kali-rpi-luks-crypt
Full disk encryption for Kali on Raspberry or other similar architecture using LUKS This HOWTO is dedicated to running Kali on Raspberry or other similar architecture, e.g. ODROID-C2 using full disk encryption with LUKS. Based on the little bit outdated document here. Motivation Deploying Kali on...
dracut: dracut: Root code execution via DHCP options command injection
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynamic Host Configuration Protocol options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and...
dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()
A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOTPATH option, an attacker on the adjacent network who controls...
Important: Red Hat Security Advisory: dracut security update
An update for dracut is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...
Kernel-exploitation
Kernel-exploitation decompress.sh Estrai il file dall'archivio CPIO root@kitploit: !/bin/sh mkdir fs cd fs cp ../initramfs.cpio.gz ./initramfs.cpio.gz gunzip ./initramfs.cpio.gz cpio -idm ../initramfs.cpio.gz &&\ cd .. &&\ gunzip -f initramfs.cpio.gz &&\ ./run.sh Nel caso di archivio con filesyst...
wireguard-initramfs
wireguard-initramfs Usa dropbear su wireguard. Abilita la rete wireguard durante l'avvio del kernel, prima che le partizioni crittografate vengano montate. Combinato con dropbear può consentire l'avvio remoto COMPLETAMENTE CRITTOGRAFATO senza archiviare materiale chiave o esporre porte sulla rete...
booster
Booster - initramfs veloce, sicuro e moderno per Linux Booster rende l'avvio iniziale più leggero, veloce e affidabile. Costruisce immagini initramfs compatte che portano il tuo sistema Linux dal firmware al filesystem root reale con il minimo sforzo e un forte supporto per l'avvio crittografato...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: initramfs: Avoid filename buffer overflow The initramfs filename field is defined in Documentation/driver-api/early-userspace/buffer-format.rst as follows: plaintext 37 cpiofile := ALGN4 + cpioheader + filename + "\0" + ALGN4 +...
dracut: dracut: Root code execution via DHCP options command injection
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynamic Host Configuration Protocol options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and...
dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()
A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOTPATH option, an attacker on the adjacent network who controls...
dracut: dracut: Root code execution via DHCP options command injection
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynamic Host Configuration Protocol options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and...
dracut: dracut: Root code execution via DHCP options command injection
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynamic Host Configuration Protocol options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and...
dracut: dracut: Root code execution via DHCP options command injection
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynamic Host Configuration Protocol options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and...
dracut security update
An update is available for dracut. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The dracut packages contain an event-driven initial RAM file system initramfs...
RHSA-2026:54571 Red Hat Security Advisory: dracut security update
Bulletin has no description...
dracut-112+suse.29.gc0c5e1d-1.1 on GA media (moderate)
dracut-112+suse.29.gc0c5e1d-1.1 on GA media Announcement ID: openSUSE-SU-2026:11504-1 Rating: moderate Cross-References: CVE-2026-15816 CVSS scores: CVE-2026-15816 SUSE : 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerabilit...
Important: Red Hat Security Advisory: dracut security update
An update for dracut is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
dracut security update
107-9.0.1 - Suppress stderr for btrfs subvolume check Orabug: 39059254 - fips: add logic for /boot subvolume on BTRFS Orabug: 36028061 - Skip unneeded FIPS logic on UEK with special FIPS Orabug: 38138800 Orabug: 38709306 - Include correct modprobe into squashfs root Orabug: 38559936 - Ship Oracle...
dracut security update
057-120.git20260728.0.1 - Skip the default FIPS logic on special UEK kernels where the FIPS module is linked directly into the kernel. Orabug: 38705580 - Ship Oracle IMA certificate Orabug: 35992862 - Ship 98-integrity.conf, populating initramfs with Oracle IMA certificate Orabug: 35992862 -...
