Linux Enterprise
1 CVEs
product
Monthly
Relax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available.
Privilege Escalation
Relax And Recover
Linux Enterprise
Enterprise Linux
Fedora
NVD
GitHub
CVSS 3.1
5.5
EPSS
0.1%
CVE-2024-23301
EPSS 0%
CVSS 5.5
MEDIUM
POC
PATCH
This Month
Relax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available.
Privilege Escalation
Relax And Recover
Linux Enterprise
+2
NVD
GitHub