Relax-and-Recover (rear) versions prior to certain patched releases create a world-readable initrd when GRUB_RESCUE is enabled. This misconfiguration could allow a local attacker to access sensitive information. Fixes are available in updated package versions for Ubuntu 18.04 LTS, 20.04 LTS, and 22.04 LTS.