CVE-2010-4176: Dracut Project Dracut

Medium severity, CVSS 4.0. EPSS: 2.3% chance of exploitation in the next 30 days.

plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which allows remote authenticated users to read terminal data from tty0 for local users.

Affected products

• Dracut Project Dracut: affected versions not specified
• Udev Project Udev: affected versions not specified

Published 2010-12-07. Last modified 2026-06-16.