CVE-2016-8637

CVE-2016-8637 describes a local information disclosure vulnerability in dracut versions prior to 045, specifically when generating initramfs images with world-readable permissions, particularly when early cpio and microcode updates are utilized. This flaw allows a local attacker to access sensitive data, such as encryption keys or credentials, from these files. The vulnerability carries a CVSSv3 score of 7.8 (High), indicating a low attack complexity and requiring local access for a high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.