Güvenlik Danışarlıklarına Dön

Relax-And-Recover Vulnerability — Ubuntu Security Update (USN-8988-1)

USN-8988-1 fixes CVE-2024-23301 in Relax-and-Recover (ReaR) on Ubuntu: with GRUB_RESCUE enabled, the generated initrd was created world-readable, leaking its contents (CWE-540-level exposure; CVSS 5.5). Update: sudo apt update && sudo apt upgrade rear and regenerate any rescue image.

High 5.5 CVSS
Ubuntu 20.04 Ubuntu 22.04

SharedLicense lisansı altında bunun anlamı

A world-readable rescue initrd contains system configuration, network details and potentially credentials — leaking it hands an attacker a map of the boot and recovery environment.

  1. Ubuntu Security Notices

  2. USN-8988-1

Publication date

3 November 2026

Overview

Relax-and-Recover could be made to expose sensitive information.

Releases


22.04 LTS


20.04 LTS


18.04 LTS

Packages

  • rear – Bare metal disaster recovery and system migration framework

Details

It was discovered that Relax-and-Recover created a world-readable initrd
when GRUB_RESCUE was enabled. A local attacker could possibly use this
issue to obtain sensitive information.

It was discovered that Relax-and-Recover created a world-readable initrd
when GRUB_RESCUE was enabled. A local attacker could possibly use this
issue to obtain sensitive information.

Update instructions

In general, a standard system update will make all the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
22.04

LTS jammy

 rear – 

2.6+dfsg-1+deb11u1build0.22.04.1
20.04

LTS focal

 rear – 

2.5+dfsg-1ubuntu0.1~esm1

Ubuntu Pro
Fix available with Ubuntu Pro via ESM Apps. A community fix might become publicly available in the future.

18.04

LTS bionic

 rear – 

2.3+dfsg-1ubuntu0.1~esm1

Ubuntu Pro
Fix available with Ubuntu Pro via ESM Apps. A community fix might become publicly available in the future.

References

Sıkça Sorulan Sorular

What is CVE-2024-23301?
It is an information-exposure flaw in Relax-and-Recover: with GRUB_RESCUE enabled, the rescue initrd was written world-readable, letting any local user read its contents — including system configuration and potentially secrets baked into the image. CVSS 5.5; fixed in USN-8988-1.
Who is affected?
Ubuntu servers with ReaR installed AND GRUB_RESCUE enabled in the ReaR configuration — the exposure requires that specific rescue-image setup.
How do I apply the fix?
Run sudo apt update && sudo apt upgrade rear and regenerate the rescue image (rear mkrescue) so the new initrd carries the corrected permissions.
What could an attacker do with the initrd?
Read whatever the image contains — boot configuration, network setup, and anything embedded for recovery — useful reconnaissance for a local attacker planning privilege escalation or persistence.

Referanslar

Güvenlik Danışarlıkları

İlgili Danışarlıklar

Tornado Regression — Ubuntu Security Update (USN-8952-3)

2026-11-11

Linux Kernel (Azure CVM) Vulnerabilities — Ubuntu Security Update (USN-9039-1)

2026-11-11

Linux Kernel (Low Latency NVIDIA) Vulnerabilities — Ubuntu Security Update (USN-9040-1)

2026-11-11

Sisteminizi güvenlik açıkları açısından kontrol edin

Size uygun tam düzeltme komutlarını görmek için ürününüzü ve işletim sisteminizi seçin.

Sisteminizi Kontrol Edin