222 matches found
Intel-Linux-Processor-Microcode-Data-Files
Intel Processor Microcode Package for Linux About The Intel Processor Microcode Update MCU Package provides a mechanism to release updates for security advisories and functional issues, including errata. In addition, MCUs are responsible for starting the SGX enclave on processors that support the...
IvantiInitrdDecryptor
Here's a quick-and-dirty tool to decrypt the Ivanti device's initrd. It's mostly academic since there are other ways to extract the much more useful LVM keys for the real root device. To use it, copy the kernel file from the Ivanti, and extract the ELF from the bzImage I used binwalk -e. Throw it...
EvilAbigail
Initrd encrypted root fs attack Scenario Laptop left turned off with FDE turned on Attacker boots from USB/CD/Network Script executes and backdoors initrd User returns to laptop, boots as normal Backdoored initrd loads: Debian/Ubuntu/Kali .so file into /sbin/init on boot, dropping a shell...
SUSE CVE-2026-97906
In the Linux kernel, the following vulnerability has been resolved: bootconfig: Fix integer overflow in initrd size check Sashiko reported that in getbootconfigfrominitrd, a crafted initrd with a huge bootconfig size such as 0xFFFFFFFF can cause the pointer arithmetic: data = void hdr - size; to...
Rocky Linux 8 [CIQ] Security Update: rear (crlsa-2024_1719)
The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-20241719 advisory. rear: creates a world-readable initrd CVE-2024-23301 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Nessus...
CVE-2026-97906
A flaw was found in the Linux kernel. A local attacker with the ability to supply a crafted initial RAM disk initrd can trigger an integer overflow during boot configuration parsing. This flaw allows the attacker to bypass memory bounds checks, causing the system to read unmapped memory and crash...
DEBIAN-CVE-2026-97906
In the Linux kernel, the following vulnerability has been resolved: bootconfig: Fix integer overflow in initrd size check Sashiko reported that in getbootconfigfrominitrd, a crafted initrd with a huge bootconfig size such as 0xFFFFFFFF can cause the pointer arithmetic: data = void hdr - size; to...
CVE-2026-97906
In the Linux kernel, the following vulnerability has been resolved: bootconfig: Fix integer overflow in initrd size check Sashiko reported that in getbootconfigfrominitrd, a crafted initrd with a huge bootconfig size such as 0xFFFFFFFF can cause the pointer arithmetic: data = void hdr - size; to...
UBUNTU-CVE-2026-97906
In the Linux kernel, the following vulnerability has been resolved: bootconfig: Fix integer overflow in initrd size check Sashiko reported that in getbootconfigfrominitrd, a crafted initrd with a huge bootconfig size such as 0xFFFFFFFF can cause the pointer arithmetic: data = void hdr - size; to...
CVE-2026-97906 bootconfig: Fix integer overflow in initrd size check
In the Linux kernel, the following vulnerability has been resolved: bootconfig: Fix integer overflow in initrd size check Sashiko reported that in getbootconfigfrominitrd, a crafted initrd with a huge bootconfig size such as 0xFFFFFFFF can cause the pointer arithmetic: data = void hdr - size; to...
CVE-2026-97906
The Linux kernel is affected by an integer overflow vulnerability within the get_boot_config_from_initrd() function. A crafted initrd with an excessively large bootconfig size (e.g., 0xFFFFFFFF) causes pointer arithmetic to wrap around, specifically when calculating data = ((void *)hdr) - size. T...
CVE-2026-97906
In the Linux kernel, the following vulnerability has been resolved: bootconfig: Fix integer overflow in initrd size check Sashiko reported that in getbootconfigfrominitrd, a crafted initrd with a huge bootconfig size such as 0xFFFFFFFF can cause the pointer arithmetic: data = void hdr - size; to...
EUVD-2026-86760
In the Linux kernel, the following vulnerability has been resolved: bootconfig: Fix integer overflow in initrd size check Sashiko reported that in getbootconfigfrominitrd, a crafted initrd with a huge bootconfig size such as 0xFFFFFFFF can cause the pointer arithmetic: data = void hdr - size; to...
CVE-2026-97906 bootconfig: Fix integer overflow in initrd size check
In the Linux kernel, the following vulnerability has been resolved: bootconfig: Fix integer overflow in initrd size check Sashiko reported that in getbootconfigfrominitrd, a crafted initrd with a huge bootconfig size such as 0xFFFFFFFF can cause the pointer arithmetic: data = void hdr - size; to...
CVE-2026-97906
In the Linux kernel, the following vulnerability has been resolved: bootconfig: Fix integer overflow in initrd size check Sashiko reported that in getbootconfigfrominitrd, a crafted initrd with a huge bootconfig size such as 0xFFFFFFFF can cause the pointer arithmetic: data = void hdr - size; to...
PT-2026-98570
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the get boot config from initrd function. A crafted initrd with an excessively large bootconfig size can cause pointer arithmetic to wrap around on 32-bit...
Linux Distros Unpatched Vulnerability : CVE-2026-97906
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bootconfig: Fix integer overflow in initrd size check Sashiko reported that in getbootconfigfrominitrd, a crafted initrd with a huge bootconfig size such as...
dracut: dracut: Root code execution via DHCP options command injection in NetworkManager initrd module
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are...
dracut: dracut: Root code execution via DHCP options command injection in NetworkManager initrd module
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are...
SUSE-SU-2026:4079-1 Security update for dracut
This update for dracut fixes the following issues: - CVE-2026-6893: Root code execution via DHCP options command injection bsc1268322. - CVE-2026-16445: Root code execution via DHCP options command injection in NetworkManager initrd module bsc1273580. Changes for dracut: - Update to version...