Local Privilege Escalation in make-initrd-ng on NixOS with Systemd Shutdown Ramfs
A local privilege escalation vulnerability exists in make-initrd-ng, affecting all NixOS users. When systemd.shutdownRamfs.enable is enabled (which is the default configuration), a local user can create a program that will be executed by root during the system shutdown process. Patches are available for NixOS 24.11 and 25.05 / unstable versions. As a temporary solution, users can mitigate the risk by setting systemd.shutdownRamfs.enable to false in their system configuration.
Vulmon