Nixos · Nixos · CVE-2025-32438
**Name of the Vulnerable Software and Affected Versions**
NixOS versions prior to 24.11 and 25.05
**Description**
The issue is a local privilege escalation affecting all NixOS users, where a local user can create a program to be executed by root during shutdown when `systemd.shutdownRamfs.enable` is enabled, which is the default setting.
**Recommendations**
For versions prior to 24.11 and 25.05, apply the existing patches.
As a temporary workaround for all affected versions, set `systemd.shutdownRamfs.enable` to `false`.