Beveiligingsadvies

CVE-2026-25828

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-02-12 00:00:00

Laatst bijgewerkt 2026-03-04 07:56:41

Toegewezen door mitre

CVSS-score 5.4

Status PUBLISHED

Beschrijving

grub-btrfs through 2026-01-31 (on Arch Linux and derivative distributions) allows initramfs OS command injection because it does not sanitize the $root parameter to resolve_device(). NOTE: a third party reports "exploitation may not be feasible under normal conditions and may depend on specific implementation details within resolve_device."

← Alle CVE's bekijken Bekijk op cve.org ↗