Two Button PWNage
ID: 54a6cfc6-d625-5da4-b33f-17526a46131d
STIX ID: report--54a6cfc6-d625-5da4-b33f-17526a46131d
Feed Name: Black Hills Infosec Blog
**CVE-2016-4484 (initramfs cryptsetup/dracut shell bug)**: The report describes a bug that can spawn an initramfs root shell (by holding Enter) on many Linux systems using cryptsetup or dracut, enabling local privilege escalation, potential information disclosure, and denial-of-service; it includes reproduction steps, an exploitation example against VMs (placing setuid binaries on an unencrypted /boot), and mitigation guidance including vendor patch links and a temporary Debian-based fix script.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
