Bug#1087697: Mkinitramfs causes machines to fail booting when used with LD_LIBRARY_PATH

To: submit@bugs.debian.org
Subject: Bug#1087697: Mkinitramfs causes machines to fail booting when used with LD_LIBRARY_PATH
From: Matan Liber <matan@pentera.io>
Date: Sun, 17 Nov 2024 14:04:54 +0200
Message-id: <[🔎] CAB-+F8OPjHz8uUw8=HqpukVYo_U+ubi+Y8esB0KVBRtJ+YaaBA@mail.gmail.com>
Reply-to: Matan Liber <matan@pentera.io>, 1087697@bugs.debian.org

Package: initramfs-tools
Version: 0.136ubuntu6.7

vulnerability identified in mkinitramfs that could lead to a Denial of Service (DoS) condition on affected systems. Using mkinitramfs with the environment variable LD_LIBRARY_PATH causes machines to fail boot due to missing libraries in the initramfs images. A full report is attached.

Attachment: Debian Mkinitramfs Vulnerability.pdf
Description: Adobe PDF document

Reply to:

Follow-Ups:
- Bug#1087697: Mkinitramfs causes machines to fail booting when used with LD_LIBRARY_PATH
  - From: Salvatore Bonaccorso <carnil@debian.org>
- Processed: Re: Bug#1087697: Mkinitramfs causes machines to fail booting when used with LD_LIBRARY_PATH
  - From: "Debian Bug Tracking System" <owner@bugs.debian.org>
- Processed: Re: Bug#1087697: Mkinitramfs causes machines to fail booting when used with LD_LIBRARY_PATH
  - From: "Debian Bug Tracking System" <owner@bugs.debian.org>
- Bug#1087697: Mkinitramfs causes machines to fail booting when used with LD_LIBRARY_PATH
  - From: Ben Hutchings <ben@decadent.org.uk>

Prev by Date: Processed: tagging 1087495
Next by Date: Bug#1069301: linux-image-6.1.0-20-amd64: bluetooth causes kernel BUG - list_del corruption, (address)->prev is LIST_POISON2
Previous by thread: Processed: tagging 1087495
Next by thread: Bug#1087697: Mkinitramfs causes machines to fail booting when used with LD_LIBRARY_PATH
Index(es):
- Date
- Thread