{"id":"CVE-2025-32438","aliases":["EUVD-2025-10983","GHSA-m7pq-h9p4-8rr4"],"status":"published","title":"Local privilege escalation in make-initrd-ng","description":"make-initrd-ng is a tool for copying binaries and their dependencies. Local privilege escalation affecting all NixOS users. With systemd.shutdownRamfs.enable enabled (the default) a local user is able to create a program that will be executed by root during shutdown. Patches exist for NixOS 24.11 and 25.05 / unstable. As a workaround, set systemd.shutdownRamfs.enable = false;.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.0019,"percentile":0.08656,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-378","CWE-379"],"published":"2025-04-15T19:57:04Z","modified":"2026-10-28T02:30:25Z","products":[{"vendor":"nixos","product":"nixpkgs"}],"references":[{"url":"https://github.com/NixOS/nixpkgs/security/advisories/GHSA-m7pq-h9p4-8rr4","tags":["x_refsource_CONFIRM","advisory"]},{"url":"https://github.com/NixOS/nixpkgs/commit/b17590193d8e5697000c23c66afcf11e1753734d","tags":["x_refsource_MISC","fix"]},{"url":"https://github.com/NixOS/nixpkgs/commit/fbf76bf72b161b9f4ab97704a8258776d5f3ffba","tags":["x_refsource_MISC","fix"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/32xxx/CVE-2025-32438.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32438","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-32438","title":"Local privilege escalation in make-initrd-ng","description":"make-initrd-ng is a tool for copying binaries and their dependencies. Local privilege escalation affecting all NixOS users. With systemd.shutdownRamfs.enable enabled (the default) a local user is able to create a program that will be executed by root during shutdown. Patches exist for NixOS 24.11 and 25.05 / unstable. As a workaround, set systemd.shutdownRamfs.enable = false;.","status":"published","published":"2025-04-15T19:57:04.668Z","modified":"2025-04-15T20:08:58.816Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-378","CWE-379"],"updated_at":"2026-11-02T14:32:46.109993Z"}],"euvd":[{"id":"EUVD-2025-10983","description":"make-initrd-ng is a tool for copying binaries and their dependencies. Local privilege escalation affecting all NixOS users. With systemd.shutdownRamfs.enable enabled (the default) a local user is able to create a program that will be executed by root during shutdown. Patches exist for NixOS 24.11 and 25.05 / unstable. As a workaround, set systemd.shutdownRamfs.enable = false;.","status":"published","published":"2025-04-15T19:57:04Z","modified":"2025-04-15T20:08:58Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:52:26.346189Z"}],"nvd":[{"id":"CVE-2025-32438","description":"make-initrd-ng is a tool for copying binaries and their dependencies. Local privilege escalation affecting all NixOS users. With systemd.shutdownRamfs.enable enabled (the default) a local user is able to create a program that will be executed by root during shutdown. Patches exist for NixOS 24.11 and 25.05 / unstable. As a workaround, set systemd.shutdownRamfs.enable = false;.","status":"published","published":"2025-04-15T20:15:39.533Z","modified":"2026-06-17T09:11:59.637Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-378","CWE-379"],"updated_at":"2026-11-02T14:11:00.456643Z"}],"osv":[{"id":"CVE-2025-32438","title":"Local privilege escalation in make-initrd-ng","description":"make-initrd-ng is a tool for copying binaries and their dependencies. Local privilege escalation affecting all NixOS users. With systemd.shutdownRamfs.enable enabled (the default) a local user is able to create a program that will be executed by root during shutdown. Patches exist for NixOS 24.11 and 25.05 / unstable. As a workaround, set systemd.shutdownRamfs.enable = false;.","status":"published","published":"2025-04-15T19:57:04.668Z","modified":"2026-10-28T02:30:25.838945819Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-378","CWE-379"],"updated_at":"2026-11-02T15:44:48.02508Z"}]}}