linux-kernel-exploitation

Linux Kernel Exploitation A collection of links related to Linux kernel security and exploitation. Updated bimonthly. Pull requests are welcome as well. Follow @andreyknvl on X, @[email protected] on Mastodon, or @andreyknvl on Bluesky to be notified of updates. Subscribe to @linkersec on...

kali-rpi-luks-crypt

LUKS를 사용한 Raspberry또는 유사 아키텍처에서 Kali의 전체 디스크 암호화 이 HOWTO는 Raspberry또는 유사 아키텍처, 예: ODROID-C2에서 LUKS를 사용한 전체 디스크 암호화로 Kali를 실행하는 데 dedicated 됩니다. 약간 오래된 문서 여기를 기반으로 합니다. 동기 Raspberry Pi또는 유사한 소형 저전력 하드웨어에서 Kali를 LAN 환경에 "throw-away-hackbox"로 배포하는 것은 분명 유용합니다. 그러나 수집된 데이터를 비밀로 유지하는 것은 필수 요구 사항입니다. 여...

booster

Booster - Linux를 위한 빠르고 안전하며 현대적인 initramfs Booster는 초기 부팅을 더 가볍고, 빠르고, 더 안정적으로 느껴지게 만듭니다. Linux 시스템을 펌웨어에서 실제 루트 파일시스템으로 최소한의 번거로움과 강력한 암호화 부팅 지원으로 이동시키는 컴팩트한 initramfs 이미지를 빌드합니다. 크고 범용적인 초기 사용자 공간을 채우는 대신, Booster는 여러분의 머신이 실제로 무엇을 필요로 하는지 파악하고 그에 맞춘 집중된 이미지를 빌드합니다. 그 결과는 호스트에 필요한 드라이버, 잠금 해제...

wireguard-initramfs

wireguard-initramfs dropbear를 wireguard 상에서 사용합니다. 커널 부팅 중, 암호화된 파티션이 마운트되기 전에 wireguard 네트워킹을 활성화합니다. 이것을 dropbear와 결합하면 키 자료를 저장하거나 원격 네트워크에 포트를 노출하지 않고도 완전히 암호화된 원격 부팅을 활성화할 수 있습니다. 인터넷 연결은 wireguard 서버 엔드포인트에 도달할 수 있는 연결만 있으면 됩니다. 일반적인 dropbear 연결과 DNS 확인을 사용하여 wireguard 엔드포인트를 찾을 수 있습니다. 이를 ...

dracut: dracut: Root code execution via DHCP options command injection

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynamic Host Configuration Protocol options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and...

AlmaLinux 9.2 [TuxCare] Security Update: dracut / dracut-caps / dracut-config-generic / dracut-config-rescue / etc (ALMALINUX9.2:CLSA-2026:1783076363)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1783076363 advisory. - A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP...

AlmaLinux 9.6 [TuxCare] Security Update: dracut / dracut-caps / dracut-config-generic / dracut-config-rescue / etc (ALMALINUX9.6:CLSA-2026:1782829348)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782829348 advisory. - A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP...

Rocky Linux 9.6 [TuxCare] Security Update: dracut / dracut-caps / dracut-config-generic / dracut-config-rescue / etc (ALMALINUX9.6:CLSA-2026:1782829348)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782829348 advisory. - A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP...

CentOS Linux 7 [TuxCare] Security Update: dracut / dracut-caps / dracut-config-generic / dracut-config-rescue / etc (CENTOS7:CLSA-2026:1787307553)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1787307553 advisory. - A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynami...

USN-8828-1 dracut vulnerabilities

It was discovered that dracut created initramfs images with overly permissive permissions under certain circumstances. A local attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 16.04 LTS. CVE-2016-8637 It was discovered that dracut did not...

USN-8828-1: dracut vulnerabilities

It was discovered that dracut created initramfs images with overly permissive permissions under certain circumstances. A local attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 16.04 LTS. CVE-2016-8637 It was discovered that dracut did not...

dracut: dracut: Root code execution via DHCP options command injection

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynamic Host Configuration Protocol options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and...

SUSE SLES15 Security Update : dracut (SUSE-SU-2026:3997-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3997-1 advisory. Update to version 059+suse.730.g73d3411aa. - CVE-2026-6893: improper handling and escaping of DHCP options can lead to command...

EulerOS Virtualization 2.12.1 : dracut (EulerOS-SA-2026-3582)

According to the versions of the dracut packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted...

EulerOS 2.0 SP15 : dracut (EulerOS-SA-2026-3802)

According to the versions of the dracut packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynamic...

microcode_ctl security, bug fix, and enhancement update

4:20260812-1.0.3 - disable late update for 06-ad-01 - add support for UEK7/UEK8 and ueknext kernels - don't bother calling dracut if virtualized Orabug: 35710077 - ensure UEK also rebuilds initramfs Orabug: 34280058 - add support for UEK7 kernels - enable early update for 06-4f-01 - remove no...

openSUSE 16 Security Update : dracut (openSUSE-SU-2026:21749-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21749-1 advisory. Update to version 059+suse.730.g73d3411aa. - CVE-2026-6893: improper handling and escaping of DHCP options can lead to command injection and roo...

EulerOS 2.0 SP12 : dracut (EulerOS-SA-2026-3332)

According to the versions of the dracut packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynamic...

EulerOS 2.0 SP12 : dracut (EulerOS-SA-2026-3257)

According to the versions of the dracut packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP Dynamic...

Security update for dracut

This update for dracut fixes the following issues: Update to version 059+suse.730.g73d3411aa. CVE-2026-6893: improper handling and escaping of DHCP options can lead to command injection and root code execution within the initramfs bsc1268322. CVE-2026-16445: improper handling and escaping of DHCP...