Integrity validation bypass in CPSD CryptoPro Secure Disk pre-boot Linux environment

CVE-2025-10010 affects CPSD CryptoPro Secure Disk for BitLocker, which uses a small Linux-based pre-boot authentication (PBA) environment on a separate unencrypted partition before invoking BitLocker to decrypt the Windows partition. Multiple integrity checks are performed at boot, including Linux Integrity Measurement Architecture (IMA), but certain configuration files are not validated by IMA and may not be covered by other integrity controls. As a result, an attacker with access to the disk can modify unvalidated configuration files in the PBA environment and cause arbitrary code execution as root during boot. SEC Consult reported a proof of concept using DHCP-related hook scripting such as /etc/dhcpcd.enter-hook to obtain a reverse shell with root privileges after restart. Because the vulnerable environment runs before or during access to the protected Windows volume, the issue can be used to implant a backdoor and access data during execution.