▲ 88 ▼ New Linux Security Flaw Uses Initramfs to Inject Malware (www.omgubuntu.co.uk) submitted 1 year ago by cm0002@programming.dev to c/linux@programming.dev 23 comments fedilink hide all child comments
[–] just_another_person@lemmy.world -3 points 1 year ago (1 child) I'm well aware. You're proving my point at mount. permalink fedilink source parent hideshow 1 child comment replies: [–] fmstrat@lemmy.nowsci.com 2 points 1 year ago But.. your original comment is just.. wrong? This isn't a critical security flaw unless you have the worst partition scheme on your encrypted volumes imaginable. The default LUKS partition scheme is vulnerable. It's not even a process flaw at that point, just "possible". There is a successful POC, it is a flaw. you can compromise disks once encrypted because everything is happening in an in-memory boot process. This is not just in-memory. This is modifying the unencrypted part of initramfs on disk. Powering off the machine does not remove the exploit. permalink fedilink source parent
[–] fmstrat@lemmy.nowsci.com 2 points 1 year ago But.. your original comment is just.. wrong? This isn't a critical security flaw unless you have the worst partition scheme on your encrypted volumes imaginable. The default LUKS partition scheme is vulnerable. It's not even a process flaw at that point, just "possible". There is a successful POC, it is a flaw. you can compromise disks once encrypted because everything is happening in an in-memory boot process. This is not just in-memory. This is modifying the unencrypted part of initramfs on disk. Powering off the machine does not remove the exploit. permalink fedilink source parent