Ubuntu notice covers Relax-and-Recover flaw exposing initrd to local users
VULNERABILITYUbunturedteam/daily · 1 source
- Severity
- Low
- Sources
- 1
What happened
USN-8988-1 states that Relax-and-Recover generated a world-readable initrd when GRUBRESCUE was enabled, allowing a local attacker to potentially obtain sensitive information. The notice gives no CVE identifier and no affected or fixed package versions. Defenders should check whether Relax-and-Recover is installed and whether GRUBRESCUE is enabled, then review the Ubuntu notice for the fixed package.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Check whether the Relax-and-Recover package is installed on Ubuntu systems.
- Check whether GRUBRESCUE is enabled, and review the Ubuntu notice USN-8988-1 for the fixed package version.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Ubuntu Security Notices
Who and what is in it
Products