Ubuntu notice covers Relax-and-Recover flaw exposing initrd to local users
VULNERABILITYUbunturedteam/daily · 1 source
- Severity
- Low
- Sources
- 1
What happened
Ubuntu security notice USN-8988-1 reports that Relax-and-Recover created a world-readable initrd when GRUBRESCUE was enabled. A local attacker could potentially exploit this to obtain sensitive information from the boot image.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Check whether the Relax-and-Recover package is installed on Ubuntu systems.
- Check whether GRUBRESCUE is enabled, and review the Ubuntu notice USN-8988-1 for the fixed package version.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Ubuntu Security Notices
Who and what is in it
Products