CVE-2025-32022

CVE-2025-32022 concerns Finit’s urandom plugin, a heap-buffer overwrite at boot in the urandom.so module. The vulnerability affects Finit 4.2 and later unless the plugin is disabled at build time, with the plugin enabled by default. The overwrite can overwrite other heap regions, potentially caus...

CVE-2025-29906

Finit is a fast init for Linux systems. Versions starting from 3.0-rc1 and prior to version 4.11 bundle an implementation of getty for the tty configuration directive that can bypass /bin/login, i.e., a user can log in as any user without authentication. This issue has been patched in version 4.1...

UBUNTU-CVE-2025-29906

Finit is a fast init for Linux systems. Versions starting from 3.0-rc1 and prior to version 4.11 bundle an implementation of getty for the tty configuration directive that can bypass /bin/login, i.e., a user can log in as any user without authentication. This issue has been patched in version 4.1...