logo

Two Button PWNage

ID: 54a6cfc6-d625-5da4-b33f-17526a46131d

STIX ID: report--54a6cfc6-d625-5da4-b33f-17526a46131d

Feed Name: Black Hills Infosec Blog

Threat Score
65/100

Date Published: 2016-11-17

Date Updated: 2026-04-27

Author: BHIS

...
...

**CVE-2016-4484 (initramfs cryptsetup/dracut shell bug)**: The report describes a bug that can spawn an initramfs root shell (by holding Enter) on many Linux systems using cryptsetup or dracut, enabling local privilege escalation, potential information disclosure, and denial-of-service; it includes reproduction steps, an exploitation example against VMs (placing setuid binaries on an unencrypted /boot), and mitigation guidance including vendor patch links and a temporary Debian-based fix script.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.