216 matches found
Intel-Linux-Processor-Microcode-Data-Files
Linux 用 Intel プロセッサー・マイクロコード・パッケージ 概要 Intel Processor Microcode Update MCU パッケージは、セキュリティ勧告および機能上の問題（エラッタを含む）に関する更新をリリースするためのメカニズムを提供します。さらに、MCU は、（SGX 機能をサポートするプロセッサー上で）SGX エンクレーブの起動、複雑な動作（アシストなど）の実装なども担当します。MCU を適用する推奨方法は、システム BIOS を使用することです。Intel プロセッサーの一部では、オペレーティング・システムを使用して実行時に MCU...
EvilAbigail
Initrd暗号化ルートファイルシステム攻撃 シナリオ FDEが有効な状態で電源が切られたノートPC 攻撃者がUSB/CD/ネットワークから起動 スクリプトが実行され、initrdをバックドア化 ユーザーがノートPCに戻り、通常通り起動 バックドア化されたinitrdがロード: Debian/Ubuntu/Kali 起動時に.soファイルを/sbin/initに注入し、シェルを起動 Fedora/CentOS LDPRELOAD .soをDefaultEnviromentに注入し、グローバルにロード、シェルを起動 対応ディストリビューション Ubuntu 14.04.3 Debian...
IvantiInitrdDecryptor
这里有一个用于解密 Ivanti 设备 initrd 的快速简易工具。它主要是学术性的，因为还有其他方法可以提取（更有用的）真实根设备的 LVM 密钥。 要使用它，请从 Ivanti 复制内核文件，并从 bzImage 中提取 ELF（我使用了 binwalk -e）。将其放入 IDA 中，查找引用了字符串 "/initrd.image" 和 "vaes" 的函数。initrd AES 密钥会在那里。将此密钥添加到脚本中，提供你的 initrd，你就会得到一个 gz。 请注意，我在提取 gzipped 内核时遇到了困难——我最终使用了 7zip，它（比 gz）宽容得多。...
SUSE CVE-2026-97906
In the Linux kernel, the following vulnerability has been resolved: bootconfig: Fix integer overflow in initrd size check Sashiko reported that in getbootconfigfrominitrd, a crafted initrd with a huge bootconfig size such as 0xFFFFFFFF can cause the pointer arithmetic: data = void hdr - size; to...
Rocky Linux 8 [CIQ] Security Update: rear (crlsa-2024_1719)
The Rocky Linux 8 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-20241719 advisory. rear: creates a world-readable initrd CVE-2024-23301 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Nessus...
CVE-2026-97906
A flaw was found in the Linux kernel. A local attacker with the ability to supply a crafted initial RAM disk initrd can trigger an integer overflow during boot configuration parsing. This flaw allows the attacker to bypass memory bounds checks, causing the system to read unmapped memory and crash...
DEBIAN-CVE-2026-97906
In the Linux kernel, the following vulnerability has been resolved: bootconfig: Fix integer overflow in initrd size check Sashiko reported that in getbootconfigfrominitrd, a crafted initrd with a huge bootconfig size such as 0xFFFFFFFF can cause the pointer arithmetic: data = void hdr - size; to...
CVE-2026-97906
In the Linux kernel, the following vulnerability has been resolved: bootconfig: Fix integer overflow in initrd size check Sashiko reported that in getbootconfigfrominitrd, a crafted initrd with a huge bootconfig size such as 0xFFFFFFFF can cause the pointer arithmetic: data = void hdr - size; to...
UBUNTU-CVE-2026-97906
In the Linux kernel, the following vulnerability has been resolved: bootconfig: Fix integer overflow in initrd size check Sashiko reported that in getbootconfigfrominitrd, a crafted initrd with a huge bootconfig size such as 0xFFFFFFFF can cause the pointer arithmetic: data = void hdr - size; to...
CVE-2026-97906
In the Linux kernel, the following vulnerability has been resolved: bootconfig: Fix integer overflow in initrd size check Sashiko reported that in getbootconfigfrominitrd, a crafted initrd with a huge bootconfig size such as 0xFFFFFFFF can cause the pointer arithmetic: data = void hdr - size; to...
EUVD-2026-86760
In the Linux kernel, the following vulnerability has been resolved: bootconfig: Fix integer overflow in initrd size check Sashiko reported that in getbootconfigfrominitrd, a crafted initrd with a huge bootconfig size such as 0xFFFFFFFF can cause the pointer arithmetic: data = void hdr - size; to...
CVE-2026-97906
The Linux kernel is affected by an integer overflow vulnerability within the get_boot_config_from_initrd() function. A crafted initrd with an excessively large bootconfig size (e.g., 0xFFFFFFFF) causes pointer arithmetic to wrap around, specifically when calculating data = ((void *)hdr) - size. T...
CVE-2026-97906 bootconfig: Fix integer overflow in initrd size check
In the Linux kernel, the following vulnerability has been resolved: bootconfig: Fix integer overflow in initrd size check Sashiko reported that in getbootconfigfrominitrd, a crafted initrd with a huge bootconfig size such as 0xFFFFFFFF can cause the pointer arithmetic: data = void hdr - size; to...
CVE-2026-97906 bootconfig: Fix integer overflow in initrd size check
In the Linux kernel, the following vulnerability has been resolved: bootconfig: Fix integer overflow in initrd size check Sashiko reported that in getbootconfigfrominitrd, a crafted initrd with a huge bootconfig size such as 0xFFFFFFFF can cause the pointer arithmetic: data = void hdr - size; to...
CVE-2026-97906
In the Linux kernel, the following vulnerability has been resolved: bootconfig: Fix integer overflow in initrd size check Sashiko reported that in getbootconfigfrominitrd, a crafted initrd with a huge bootconfig size such as 0xFFFFFFFF can cause the pointer arithmetic: data = void hdr - size; to...
Linux Distros Unpatched Vulnerability : CVE-2026-97906
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bootconfig: Fix integer overflow in initrd size check Sashiko reported that in getbootconfigfrominitrd, a crafted initrd with a huge bootconfig size such as...
PT-2026-98570
In the Linux kernel, the following vulnerability has been resolved: bootconfig: Fix integer overflow in initrd size check Sashiko reported that in get boot config from initrd, a crafted initrd with a huge bootconfig size such as 0xFFFFFFFF can cause the pointer arithmetic: data = void hdr - size;...
dracut: dracut: Root code execution via DHCP options command injection in NetworkManager initrd module
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are...
dracut: dracut: Root code execution via DHCP options command injection in NetworkManager initrd module
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are...
SUSE-SU-2026:4079-1 Security update for dracut
This update for dracut fixes the following issues: - CVE-2026-6893: Root code execution via DHCP options command injection bsc1268322. - CVE-2026-16445: Root code execution via DHCP options command injection in NetworkManager initrd module bsc1273580. Changes for dracut: - Update to version...