kali-rpi-luks-crypt

Raspberry（または類似のアーキテクチャ）上のKali向けLUKSを用いたフルディスク暗号化 このHOWTOは、KaliをRaspberry（または他の類似のアーキテクチャ、例：ODROID-C2）上で実行し、LUKSによるフルディスク暗号化を使用することに特化しています。少し古いドキュメントここに基づいています。 動機 LAN環境内のRaspberry...

booster

Booster - Linux向けの高速で安全かつモダンなinitramfs Boosterは、初期ブートをより軽快に、より高速に、より信頼できるものにします。 コンパクトなinitramfsイメージを構築し、Linuxシステムをファームウェアから実際のルートファイルシステムへと、手間を最小限に抑えつつ強力な暗号化ブートサポートとともに移行させます。 大規模で汎用的な初期ユーザースペースを詰め込む代わりに、Boosterはマシンが実際に必要とするものを検出し、それに合わせた焦点を絞ったイメージを構築します。...

Kernel-exploitation

Kernel-exploitation decompress.sh CPIOアーカイブからファイルを展開する !/bin/sh mkdir fs cd fs cp ../initramfs.cpio.gz ./initramfs.cpio.gz gunzip ./initramfs.cpio.gz cpio -idm ../initramfs.cpio.gz &&\ cd .. &&\ gunzip -f initramfs.cpio.gz &&\ ./run.sh ext4ファイルシステムアーカイブの場合 mount ./initramfs.cpio.gz ./fs/...

wireguard-initramfs

wireguard-initramfs dropbear を wireguard 経由で使用します。 カーネル起動中、暗号化パーティションがマウントされる前に wireguard ネットワーキングを有効にします。dropbear と組み合わせることで、鍵素材を保存したりリモートネットワーク上にポートを公開したりすることなく、完全に暗号化されたリモートブートを実現できます。wireguard サーバーのエンドポイントに到達できるインターネット接続が存在するだけでよいのです。 通常の dropbear 接続と DNS 解決を使用して wireguard エンドポイントを見つけることができます...

dracut: dracut: Root code execution via DHCP options command injection

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynamic Host Configuration Protocol options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and...

AlmaLinux 9.2 [TuxCare] Security Update: dracut / dracut-caps / dracut-config-generic / dracut-config-rescue / etc (ALMALINUX9.2:CLSA-2026:1783076363)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1783076363 advisory. - A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP...

AlmaLinux 9.6 [TuxCare] Security Update: dracut / dracut-caps / dracut-config-generic / dracut-config-rescue / etc (ALMALINUX9.6:CLSA-2026:1782829348)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782829348 advisory. - A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP...

Rocky Linux 9.6 [TuxCare] Security Update: dracut / dracut-caps / dracut-config-generic / dracut-config-rescue / etc (ALMALINUX9.6:CLSA-2026:1782829348)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782829348 advisory. - A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP...

CentOS Linux 7 [TuxCare] Security Update: dracut / dracut-caps / dracut-config-generic / dracut-config-rescue / etc (CENTOS7:CLSA-2026:1787307553)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1787307553 advisory. - A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynami...

USN-8828-1 dracut vulnerabilities

It was discovered that dracut created initramfs images with overly permissive permissions under certain circumstances. A local attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 16.04 LTS. CVE-2016-8637 It was discovered that dracut did not...

USN-8828-1: dracut vulnerabilities

It was discovered that dracut created initramfs images with overly permissive permissions under certain circumstances. A local attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 16.04 LTS. CVE-2016-8637 It was discovered that dracut did not...

dracut: dracut: Root code execution via DHCP options command injection

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynamic Host Configuration Protocol options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and...

SUSE SLES15 Security Update : dracut (SUSE-SU-2026:3997-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3997-1 advisory. Update to version 059+suse.730.g73d3411aa. - CVE-2026-6893: improper handling and escaping of DHCP options can lead to command...

EulerOS Virtualization 2.12.1 : dracut (EulerOS-SA-2026-3582)

According to the versions of the dracut packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted...

EulerOS 2.0 SP15 : dracut (EulerOS-SA-2026-3802)

According to the versions of the dracut packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynamic...

microcode_ctl security, bug fix, and enhancement update

4:20260812-1.0.3 - disable late update for 06-ad-01 - add support for UEK7/UEK8 and ueknext kernels - don't bother calling dracut if virtualized Orabug: 35710077 - ensure UEK also rebuilds initramfs Orabug: 34280058 - add support for UEK7 kernels - enable early update for 06-4f-01 - remove no...

openSUSE 16 Security Update : dracut (openSUSE-SU-2026:21749-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21749-1 advisory. Update to version 059+suse.730.g73d3411aa. - CVE-2026-6893: improper handling and escaping of DHCP options can lead to command injection and roo...

EulerOS 2.0 SP12 : dracut (EulerOS-SA-2026-3332)

According to the versions of the dracut packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynamic...

EulerOS 2.0 SP12 : dracut (EulerOS-SA-2026-3257)

According to the versions of the dracut packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynamic...

Security update for dracut

This update for dracut fixes the following issues: Update to version 059+suse.730.g73d3411aa. CVE-2026-6893: improper handling and escaping of DHCP options can lead to command injection and root code execution within the initramfs bsc1268322. CVE-2026-16445: improper handling and escaping of DHCP...