Advisorylow
Ubuntu Relax-and-Recover allows sensitive information access
Original title: USN-8988-1: Relax-and-Recover vulnerability
AI summary · x-ai/grok-4.7Summaries by Vani AI
A local attacker can obtain sensitive information from the world-readable initrd.
Ubuntu Security Notice USN-8988-1 reports that Relax-and-Recover created a world-readable initrd when GRUB_RESCUE was enabled. A local attacker could possibly use this issue to obtain sensitive information.
Security assessment · AI, from the article
Impact: obtain sensitive information
- Vendors
- Ubuntu
- Products
- Relax-and-Recover
From the original article
It was discovered that Relax-and-Recover created a world-readable initrd when GRUB_RESCUE was enabled. A local attacker could possibly use this issue to obtain sensitive information.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.