← Back

Relax And Recover

relax-and-recover

Vendor: Relax And Recover • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-23301
4Fedoraproject
RedhatRelax And Recover+1 more
4Enterprise Linux
FedoraLinux Enterprise+1 more
Jun 17, 2026
Jan 12, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Relax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y. This allows local attackers to gain access to system secrets otherwise only readable by root.