CVE-2025-29906

CVE-2025-29906 affects Finit, a fast init for Linux. Versions 3.0-rc1 up to and including 4.10 bundle a getty implementation for the tty directive that can bypass /bin/login, allowing login without authentication. The issue is fixed in version 4.11. Affected users should upgrade to 4.11 or later;...