CVE catalog

CVE-2024-23301

rear: CVE-2024-23301

Severity: High · CVSS 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published: Jan 12, 2024, 11:15:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.29% · Oct 25, 2026

Relax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y. This allows local attackers to gain access to system secrets otherwise only readable by root.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	rear	sid	`2.9+dfsg-3`	fixed
Debian	rear	forky	`2.9+dfsg-3`	fixed
Debian	rear	trixie	`2.7+dfsg-1.2`	fixed
Debian	rear	bookworm	`2.7+dfsg-1+deb12u1`	fixed
Ubuntu	rear	18.04	`2.2+dfsg-2`	vulnerable
Ubuntu	rear	18.04	`2.3+dfsg-1`	vulnerable
Ubuntu	rear	20.04	`2.5+dfsg-1`	vulnerable
Ubuntu	rear	22.04	`2.6+dfsg-1`	vulnerable
Suse	rear27a	linux enterprise high availability extension 12 sp5	`2.7-8.6.1`	fixed
Suse	rear118a	linux enterprise high availability extension 12 sp5	`1.18.a-9.3.1`	fixed
Opensuse	rear	tumbleweed	`2.7-2.1`	fixed
Suse	rear116	linux enterprise high availability extension 12 sp5	`1.16-15.3.1`	fixed
Suse	rear27a	linux enterprise high availability extension 15 sp5	`2.7-150500.3.3.1`	fixed
Opensuse	rear27a	leap 15.5	`2.7-150500.3.3.1`	fixed
Suse	rear23a	linux enterprise high availability extension 15 sp1	`2.3.a-150000.9.9.1`	fixed
Suse	rear23a	linux enterprise high availability extension 15 sp2	`2.3.a-150000.9.9.1`	fixed
Suse	rear23a	linux enterprise high availability extension 12 sp5	`2.3.a-3.9.1`	fixed
Suse	rear23a	linux enterprise high availability extension 15 sp3	`2.3.a-150300.21.3.1`	fixed
Suse	rear23a	linux enterprise high availability extension 15 sp4	`2.3.a-150300.21.3.1`	fixed
Suse	rear23a	linux enterprise high availability extension 15 sp5	`2.3.a-150300.21.3.1`	fixed
Opensuse	rear23a	leap 15.5	`2.3.a-150300.21.3.1`	fixed
Suse	rear1172a	linux enterprise high availability extension 12 sp5	`1.17.2.a-5.3.1`	fixed
Suse	rear27a	linux enterprise high availability extension 15 sp2	`2.7-150200.5.6.1`	fixed
Suse	rear27a	linux enterprise high availability extension 15 sp3	`2.7-150200.5.6.1`	fixed
Suse	rear27a	linux enterprise high availability extension 15 sp4	`2.7-150200.5.6.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	rear	source	sid	`2.7+dfsg-1.2`	not yet assigned	Not reported	[1060747]
Debian	rear	source	forky	`2.7+dfsg-1.2`	not yet assigned	Not reported	[1060747]
Debian	rear	source	trixie	`2.7+dfsg-1.2`	not yet assigned	Not reported	[1060747]
Debian	rear	source	bookworm	`2.7+dfsg-1+deb12u1`	not yet assigned	Not reported	[1060747]
Suse	rear27a	rpm	linux enterprise high availability extension 12 sp5	`2.7-8.6.1`	Not reported	SUSE-SU-2024:0135-1	Not reported
Suse	rear118a	rpm	linux enterprise high availability extension 12 sp5	`1.18.a-9.3.1`	Not reported	SUSE-SU-2024:0190-1	Not reported
Opensuse	rear	rpm	tumbleweed	`2.7-2.1`	Not reported	OPENSUSE-SU-2024:13612-1	Not reported
Suse	rear116	rpm	linux enterprise high availability extension 12 sp5	`1.16-15.3.1`	Not reported	SUSE-SU-2024:0291-1	Not reported
Suse	rear27a	rpm	linux enterprise high availability extension 15 sp5	`2.7-150500.3.3.1`	Not reported	SUSE-SU-2024:0657-1	Not reported
Opensuse	rear27a	rpm	leap 15.5	`2.7-150500.3.3.1`	Not reported	SUSE-SU-2024:0657-1	Not reported
Suse	rear23a	rpm	linux enterprise high availability extension 15 sp1	`2.3.a-150000.9.9.1`	Not reported	SUSE-SU-2024:0239-1	Not reported
Suse	rear23a	rpm	linux enterprise high availability extension 15 sp2	`2.3.a-150000.9.9.1`	Not reported	SUSE-SU-2024:0239-1	Not reported
Suse	rear23a	rpm	linux enterprise high availability extension 12 sp5	`2.3.a-3.9.1`	Not reported	SUSE-SU-2024:0148-1	Not reported
Suse	rear23a	rpm	linux enterprise high availability extension 15 sp3	`2.3.a-150300.21.3.1`	Not reported	SUSE-SU-2024:0247-1	Not reported
Suse	rear23a	rpm	linux enterprise high availability extension 15 sp4	`2.3.a-150300.21.3.1`	Not reported	SUSE-SU-2024:0247-1	Not reported
Suse	rear23a	rpm	linux enterprise high availability extension 15 sp5	`2.3.a-150300.21.3.1`	Not reported	SUSE-SU-2024:0247-1	Not reported
Opensuse	rear23a	rpm	leap 15.5	`2.3.a-150300.21.3.1`	Not reported	SUSE-SU-2024:0247-1	Not reported
Suse	rear1172a	rpm	linux enterprise high availability extension 12 sp5	`1.17.2.a-5.3.1`	Not reported	SUSE-SU-2024:0292-1	Not reported
Suse	rear27a	rpm	linux enterprise high availability extension 15 sp2	`2.7-150200.5.6.1`	Not reported	SUSE-SU-2024:0253-1	Not reported
Suse	rear27a	rpm	linux enterprise high availability extension 15 sp3	`2.7-150200.5.6.1`	Not reported	SUSE-SU-2024:0253-1	Not reported
Suse	rear27a	rpm	linux enterprise high availability extension 15 sp4	`2.7-150200.5.6.1`	Not reported	SUSE-SU-2024:0253-1	Not reported

[Debian bug #1060747]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]