Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
grub-btrfs through 2026-01-31 (on Arch Linux and derivative distributions) allows initramfs OS command injection because it does not sanitize the $root parameter to resolve_device(). NOTE: a third party reports "exploitation may not be feasible under normal conditions and may depend on specific implementation details within resolve_device."
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-02-12 | 1 | Disclosure1 |
| 2026-02-15 | 1 | Patch1 |
CVE-2026-25828 grub-btrfs through 2026-01-31 (on Arch Linux and derivative distributions) allows initramfs OS command injection because it does not sanitize the $root parameter to r… https://www.cve.org/CVERecord?id=CVE-2026-25828
Post summary
CVE-2026-25828 is a vulnerability in grub-btrfs that permits OS command injection in the initramfs due to an unsanitized $root parameter, impacting Arch Linux and derivative distributions.
🚨 Alert: CVE-2026-25828 spotted! High risk of exploitation in grub-btrfs on Arch Linux & derivatives. ⚠️ Unsanitized $root in resolve_device() enables OS command injection via initramfs. Patch ASAP to stay safe! 🔒 #CyberSecurity #Linux #InfoSec
Post summary
The tweet announces CVE-2026-25828, details a command injection vulnerability in grub-btrfs on Arch Linux, and urges users to apply a patch immediately.