Every CVE Search/ Get API key

CVE-2026-16445

Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module

7.5 HighFix available

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are improperly handled and written into a temporary shell script without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs during system boot.

Attack profile

How easy it is to exploit

Attack vector
Adjacent network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

3.22%Up 2.2 points since Jul 22, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.5

Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are improperly handled and written into a temporary shell script without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs during system boot.

Record
CVE-2026-16445
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-78
Updated
2026-11-04
EUVDEUVD-2026-46253 7.5

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are improperly handled and written into a temporary shell script without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs during system boot.

Record
EUVD-2026-46253
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-04
GitHub AdvisoriesGHSA-4672-282m-8fgr 7.5

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this...

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are improperly handled and written into a temporary shell script without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs during system boot.

Record
GHSA-4672-282m-8fgr
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-78
Updated
2026-11-02
NVD 7.5

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are improperly handled and written into a temporary shell script without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs during system boot.

Record
CVE-2026-16445
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-78
Updated
2026-11-04
OSVBELL-CVE-2026-16445 7.5

CVE-2026-16445 does not affect BellSoft software

Record
BELL-CVE-2026-16445
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.5

Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are improperly handled and written into a temporary shell script without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs during system boot.

Record
CVE-2026-16445
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-78
Updated
2026-11-03
Show 20 moreShow less
OSVDEBIAN-CVE-2026-16445 7.5

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are improperly handled and written into a temporary shell script without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs during system boot.

Record
DEBIAN-CVE-2026-16445
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-3300 7.5

dracut security update

dracut contains tools to create bootable initramfses for the Linux kernel. Unlike previous implementations, dracut hard-codes as little as possible into the initramfs. dracut contains various modules which are driven by the event-based udev. Having root on MD, DM, LVM2, LUKS is supported as well as NFS, iSCSI, NBD, FCoE with the dracut-network package.

Security Fix(es):

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are improperly handled and written into a temporary shell script without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs during system boot.(CVE-2026-16445)

Record
OESA-2026-3300
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-3301 7.5

dracut security update

dracut contains tools to create bootable initramfses for the Linux kernel. Unlike previous implementations, dracut hard-codes as little as possible into the initramfs. dracut contains various modules which are driven by the event-based udev. Having root on MD, DM, LVM2, LUKS is supported as well as NFS, iSCSI, NBD, FCoE with the dracut-network package.

Security Fix(es):

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are improperly handled and written into a temporary shell script without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs during system boot.(CVE-2026-16445)

Record
OESA-2026-3301
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:26534 7.5

Red Hat Security Advisory: dracut security update

Record
RHSA-2026:26534
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:40700 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:40700
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:61252 7.5

Red Hat Security Advisory: dracut security update

Record
RHSA-2026:61252
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:69118 7.5

Red Hat Security Advisory: dracut security update

Record
RHSA-2026:69118
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:69119 7.5

Red Hat Security Advisory: dracut security update

Record
RHSA-2026:69119
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-16445 7.5

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are improperly handled and written into a temporary shell script without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs during system boot.

Record
UBUNTU-CVE-2026-16445
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2026:11657-1 No score

dracut-112+suse.47.gec0b378-1.1 on GA media

These are all security issues fixed in the dracut-112+suse.47.gec0b378-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11657-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21749-1 No score

Security update for dracut

This update for dracut fixes the following issues:

Update to version 059+suse.730.g73d3411aa.

  • CVE-2026-6893: improper handling and escaping of DHCP options can lead to command injection and root code execution within the initramfs (bsc#1268322).
  • CVE-2026-16445: improper handling and escaping of DHCP options can lead to command injection and root code execution within the initramfs during system boot (bsc#1273580).

Changes for dracut:

  • Update to version 059+suse.730.g73d3411aa:
    • fix(network-legacy): sanitize values written to /tmp/net.${netif}.override
    • fix(network-legacy): sanitize values written to /tmp/net.${netif}.gw
    • fix(network-legacy): sanitize values written to /tmp/net.${netif}.hostname
    • fix(network-legacy): strip DHCP-supplied domain to a safe charset
Record
openSUSE-SU-2026:21749-1
Updated
2026-11-02
OSVSUSE-SU-2026:23444-1 No score

Security update for dracut

This update for dracut fixes the following issues:

  • CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).
  • CVE-2026-16445: Root code execution via DHCP options command injection in NetworkManager initrd module (bsc#1273580).

Changes for dracut:

  • Update to version 059+suse.615.g018c5a4:
  • fix(network-legacy): sanitize values written to /tmp/net.${netif}.override
  • fix(network-legacy): sanitize values written to /tmp/net.${netif}.gw
  • fix(network-legacy): sanitize values written to /tmp/net.${netif}.hostname
  • fix(network-legacy): strip DHCP-supplied domain to a safe charset
  • fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
Record
SUSE-SU-2026:23444-1
Updated
2026-11-02
OSVSUSE-SU-2026:23466-1 No score

Security update for dracut

This update for dracut fixes the following issues:

Update to version 059+suse.730.g73d3411aa.

  • CVE-2026-6893: improper handling and escaping of DHCP options can lead to command injection and root code execution within the initramfs (bsc#1268322).
  • CVE-2026-16445: improper handling and escaping of DHCP options can lead to command injection and root code execution within the initramfs during system boot (bsc#1273580).

Changes for dracut:

  • Update to version 059+suse.730.g73d3411aa:
    • fix(network-legacy): sanitize values written to /tmp/net.${netif}.override
    • fix(network-legacy): sanitize values written to /tmp/net.${netif}.gw
    • fix(network-legacy): sanitize values written to /tmp/net.${netif}.hostname
    • fix(network-legacy): strip DHCP-supplied domain to a safe charset
Record
SUSE-SU-2026:23466-1
Updated
2026-11-02
OSVSUSE-SU-2026:23513-1 No score

Security update for dracut

This update for dracut fixes the following issues:

  • CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).
  • CVE-2026-16445: Root code execution via DHCP options command injection in NetworkManager initrd module (bsc#1273580).

Changes for dracut:

  • Update to version 059+suse.649.g0274006:
  • fix(network-legacy): sanitize values written to /tmp/net.${netif}.override
  • fix(network-legacy): sanitize values written to /tmp/net.${netif}.gw
  • fix(network-legacy): sanitize values written to /tmp/net.${netif}.hostname
  • fix(network-legacy): strip DHCP-supplied domain to a safe charset
  • fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
Record
SUSE-SU-2026:23513-1
Updated
2026-11-02
OSVSUSE-SU-2026:23614-1 No score

Security update for dracut

This update for dracut fixes the following issues:

Update to version 059+suse.730.g73d3411aa.

  • CVE-2026-6893: improper handling and escaping of DHCP options can lead to command injection and root code execution within the initramfs (bsc#1268322).
  • CVE-2026-16445: improper handling and escaping of DHCP options can lead to command injection and root code execution within the initramfs during system boot (bsc#1273580).

Changes for dracut:

  • Update to version 059+suse.730.g73d3411aa:
    • fix(network-legacy): sanitize values written to /tmp/net.${netif}.override
    • fix(network-legacy): sanitize values written to /tmp/net.${netif}.gw
    • fix(network-legacy): sanitize values written to /tmp/net.${netif}.hostname
    • fix(network-legacy): strip DHCP-supplied domain to a safe charset
Record
SUSE-SU-2026:23614-1
Updated
2026-11-02
OSVSUSE-SU-2026:3931-1 No score

Security update for dracut

This update for dracut fixes the following issues:

  • CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).
  • CVE-2026-16445: Root code execution via DHCP options command injection in NetworkManager initrd module (bsc#1273580).

Changes for dracut:

  • Update to version 059+suse.576.g72b98359a:
  • fix(network-legacy): sanitize values written to /tmp/net.${netif}.override
  • fix(network-legacy): sanitize values written to /tmp/net.${netif}.gw
  • fix(network-legacy): sanitize values written to /tmp/net.${netif}.hostname
  • fix(network-legacy): strip DHCP-supplied domain to a safe charset
Record
SUSE-SU-2026:3931-1
Updated
2026-11-02
OSVSUSE-SU-2026:3997-1 No score

Security update for dracut

This update for dracut fixes the following issues:

Update to version 059+suse.730.g73d3411aa.

  • CVE-2026-6893: improper handling and escaping of DHCP options can lead to command injection and root code execution within the initramfs (bsc#1268322).
  • CVE-2026-16445: improper handling and escaping of DHCP options can lead to command injection and root code execution within the initramfs during system boot (bsc#1273580).

Changes for dracut:

  • Update to version 059+suse.730.g73d3411aa:
    • fix(network-legacy): sanitize values written to /tmp/net.${netif}.override
    • fix(network-legacy): sanitize values written to /tmp/net.${netif}.gw
    • fix(network-legacy): sanitize values written to /tmp/net.${netif}.hostname
    • fix(network-legacy): strip DHCP-supplied domain to a safe charset
Record
SUSE-SU-2026:3997-1
Updated
2026-11-02
OSVSUSE-SU-2026:4078-1 No score

Security update for dracut

This update for dracut fixes the following issues:

  • CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).
  • CVE-2026-16445: Root code execution via DHCP options command injection in NetworkManager initrd module (bsc#1273580).

Changes for dracut:

  • Update to version 055+suse.371.g92f67c2:
  • fix(network-legacy): sanitize values written to /tmp/net.${netif}.override
  • fix(network-legacy): sanitize values written to /tmp/net.${netif}.gw
  • fix(network-legacy): sanitize values written to /tmp/net.${netif}.hostname
  • fix(network-legacy): strip DHCP-supplied domain to a safe charset
Record
SUSE-SU-2026:4078-1
Updated
2026-11-02
OSVSUSE-SU-2026:4079-1 No score

Security update for dracut

This update for dracut fixes the following issues:

  • CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).
  • CVE-2026-16445: Root code execution via DHCP options command injection in NetworkManager initrd module (bsc#1273580).

Changes for dracut:

  • Update to version 055+suse.408.g34171a9:
  • fix(network-legacy): sanitize values written to /tmp/net.${netif}.override
  • fix(network-legacy): sanitize values written to /tmp/net.${netif}.gw
  • fix(network-legacy): sanitize values written to /tmp/net.${netif}.hostname
  • fix(network-legacy): strip DHCP-supplied domain to a safe charset
Record
SUSE-SU-2026:4079-1
Updated
2026-11-02
OSVUSN-8828-1 No score

dracut vulnerabilities

It was discovered that dracut created initramfs images with overly permissive permissions under certain circumstances. A local attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-8637)

It was discovered that dracut did not properly sanitize DHCP options before writing them to shell scripts under certain circumstances. A remote attacker controlling a DHCP server on the local network could possibly use this issue to execute arbitrary code as root during system boot. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2026-6893)

It was discovered that dracut did not properly quote error messages written to shell scripts under certain circumstances. A remote attacker controlling a DHCP server on the local network could possibly use this issue to execute arbitrary code as root during system boot. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2026-15816)

It was discovered that dracut did not properly sanitize network configuration data before writing it to a temporary shell script under certain circumstances. A remote attacker controlling DHCP on the local network could possibly use this issue to execute arbitrary code as root during system boot. This issue only affected Ubuntu 22.04 LTS. (CVE-2026-16445)

Record
USN-8828-1
Updated
2026-11-02

Affected products

Show 2 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
dracut
Debian:12
 All versions, plus listed versions
059+212-1059+212-2059+212-3059+212-4059-4
Show 45 moreShow less
060+5-1060+5-2~exp1060+5-7060+5-8102-1102-2102-3103-1103-1.1103-2105-1105-2105-2~exp1105-2~exp2105-2~exp3105-2~exp4105-2~exp5105-2~exp6105-2~exp7105-2~exp8105-3106-1106-2106-3106-4106-5106-5~bpo12+1106-6107-1107-2108-1108-2108-3108-4108-5108-6108-7108-8109-1109-10109-11109-1exp1109-2109-3109-4
 None known
dracut
Debian:13
 All versions, plus listed versions
106-6107-1107-2108-1108-2
Show 45 moreShow less
108-3108-4108-5108-6108-7108-8109-1109-10109-11109-1exp1109-2109-3109-4109-5109-6109-6exp1109-6exp2109-6exp3109-7109-8109-9110-1110-10110-11110-12110-2110-3110-4110-5110-6110-7110-8110-9111-1111-2111-3111-4111-5111-6112-1112-2112-3112-4112-5112-6
 None known
dracut
Debian:14
 before 112-1, plus listed versions
106-6107-1107-2108-1108-2
Show 39 moreShow less
108-3108-4108-5108-6108-7108-8109-1109-10109-11109-1exp1109-2109-3109-4109-5109-6109-6exp1109-6exp2109-6exp3109-7109-8109-9110-1110-10110-11110-12110-2110-3110-4110-5110-6110-7110-8110-9111-1111-2111-3111-4111-5111-6
112-1
dracut
openEuler:20.03-LTS-SP4
 before 050-12.oe2003sp4
050-12.oe2003sp4
dracut
openEuler:22.03-LTS-SP4
 before 055-19.oe2203sp4
055-19.oe2203sp4
dracut
Red Hat:enterprise_linux:8::baseos
 before 0:049-244.git20260529.el8_10
0:049-244.git20260529.el8_10
dracut-caps
Red Hat:enterprise_linux:8::baseos
 before 0:049-244.git20260529.el8_10
0:049-244.git20260529.el8_10
dracut-config-generic
Red Hat:enterprise_linux:8::baseos
 before 0:049-244.git20260529.el8_10
0:049-244.git20260529.el8_10
dracut-config-rescue
Red Hat:enterprise_linux:8::baseos
 before 0:049-244.git20260529.el8_10
0:049-244.git20260529.el8_10
dracut-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:049-244.git20260529.el8_10
0:049-244.git20260529.el8_10
Show 86 moreShow less
Affected packages
PackageAffectedFixed
dracut-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:049-244.git20260529.el8_10
0:049-244.git20260529.el8_10
dracut-live
Red Hat:enterprise_linux:8::baseos
 before 0:049-244.git20260529.el8_10
0:049-244.git20260529.el8_10
dracut-network
Red Hat:enterprise_linux:8::baseos
 before 0:049-244.git20260529.el8_10
0:049-244.git20260529.el8_10
dracut-squash
Red Hat:enterprise_linux:8::baseos
 before 0:049-244.git20260529.el8_10
0:049-244.git20260529.el8_10
dracut-tools
Red Hat:enterprise_linux:8::baseos
 before 0:049-244.git20260529.el8_10
0:049-244.git20260529.el8_10
dracut
Red Hat:hummingbird:1
 before 0:109-7.hum1
0:109-7.hum1
dracut-caps
Red Hat:hummingbird:1
 before 0:109-7.hum1
0:109-7.hum1
dracut-config-generic
Red Hat:hummingbird:1
 before 0:109-7.hum1
0:109-7.hum1
dracut-config-rescue
Red Hat:hummingbird:1
 before 0:109-7.hum1
0:109-7.hum1
dracut-live
Red Hat:hummingbird:1
 before 0:109-7.hum1
0:109-7.hum1
dracut-network
Red Hat:hummingbird:1
 before 0:109-7.hum1
0:109-7.hum1
dracut-squash
Red Hat:hummingbird:1
 before 0:109-7.hum1
0:109-7.hum1
dracut-tools
Red Hat:hummingbird:1
 before 0:109-7.hum1
0:109-7.hum1
dracut
Red Hat:rhel_e4s:8.8::baseos
 before 0:049-223.git20230119.el8_8.1
0:049-223.git20230119.el8_8.1
dracut-network
Red Hat:rhel_e4s:8.8::baseos
 before 0:049-223.git20230119.el8_8.1
0:049-223.git20230119.el8_8.1
dracut
Red Hat:rhel_tus:8.8::baseos
 before 0:049-223.git20230119.el8_8.1
0:049-223.git20230119.el8_8.1
dracut-network
Red Hat:rhel_tus:8.8::baseos
 before 0:049-223.git20230119.el8_8.1
0:049-223.git20230119.el8_8.1
dracut
Red Hat:rhel_aus:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-caps
Red Hat:rhel_aus:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-config-generic
Red Hat:rhel_aus:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-config-rescue
Red Hat:rhel_aus:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-debuginfo
Red Hat:rhel_aus:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-debugsource
Red Hat:rhel_aus:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-live
Red Hat:rhel_aus:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-network
Red Hat:rhel_aus:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-squash
Red Hat:rhel_aus:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-tools
Red Hat:rhel_aus:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-caps
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-config-generic
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-config-rescue
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-debuginfo
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-debugsource
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-live
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-network
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-squash
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-tools
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut
Red Hat:rhel_aus:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-caps
Red Hat:rhel_aus:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-config-generic
Red Hat:rhel_aus:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-config-rescue
Red Hat:rhel_aus:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-debuginfo
Red Hat:rhel_aus:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-debugsource
Red Hat:rhel_aus:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-live
Red Hat:rhel_aus:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-network
Red Hat:rhel_aus:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-squash
Red Hat:rhel_aus:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-tools
Red Hat:rhel_aus:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-caps
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-config-generic
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-config-rescue
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-debuginfo
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-debugsource
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-live
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-network
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-squash
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-tools
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut
SUSE:Linux Micro 6.0
 before 059+suse.615.g018c5a4-1.1
059+suse.615.g018c5a4-1.1
dracut
SUSE:Linux Micro 6.2
 before 059+suse.730.g73d3411aa-160000.1.1
059+suse.730.g73d3411aa-160000.1.1
dracut
SUSE:Linux Micro 6.1
 before 059+suse.649.g0274006-slfo.1.1_1.1
059+suse.649.g0274006-slfo.1.1_1.1
dracut
SUSE:Linux Enterprise Server 16.0
 before 059+suse.730.g73d3411aa-160000.1.1
059+suse.730.g73d3411aa-160000.1.1
dracut
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 059+suse.730.g73d3411aa-160000.1.1
059+suse.730.g73d3411aa-160000.1.1
dracut
SUSE:Linux Enterprise Module for Basesystem 15 SP7
 before 059+suse.576.g72b98359a-150700.3.23.1
059+suse.576.g72b98359a-150700.3.23.1
dracut
SUSE:Linux Enterprise High Availability Extension 15 SP7
 before 059+suse.576.g72b98359a-150700.3.23.1
059+suse.576.g72b98359a-150700.3.23.1
dracut
SUSE:Linux Enterprise High Availability Extension 15 SP6
 before 059+suse.571.g3d42218af-150600.3.35.1
059+suse.571.g3d42218af-150600.3.35.1
dracut
SUSE:Linux Enterprise Server 15 SP6-LTSS
 before 059+suse.571.g3d42218af-150600.3.35.1
059+suse.571.g3d42218af-150600.3.35.1
dracut
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
 before 059+suse.571.g3d42218af-150600.3.35.1
059+suse.571.g3d42218af-150600.3.35.1
dracut
SUSE:Linux Enterprise Micro 5.3
 before 055+suse.371.g92f67c2-150400.3.55.1
055+suse.371.g92f67c2-150400.3.55.1
dracut
SUSE:Linux Enterprise Micro 5.4
 before 055+suse.371.g92f67c2-150400.3.55.1
055+suse.371.g92f67c2-150400.3.55.1
dracut
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 055+suse.371.g92f67c2-150400.3.55.1
055+suse.371.g92f67c2-150400.3.55.1
dracut
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 055+suse.371.g92f67c2-150400.3.55.1
055+suse.371.g92f67c2-150400.3.55.1
dracut
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 055+suse.371.g92f67c2-150400.3.55.1
055+suse.371.g92f67c2-150400.3.55.1
dracut
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 055+suse.371.g92f67c2-150400.3.55.1
055+suse.371.g92f67c2-150400.3.55.1
dracut
SUSE:Linux Enterprise Micro 5.5
 before 055+suse.408.g34171a9-150500.3.47.1
055+suse.408.g34171a9-150500.3.47.1
dracut
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
 before 055+suse.408.g34171a9-150500.3.47.1
055+suse.408.g34171a9-150500.3.47.1
dracut
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
 before 055+suse.408.g34171a9-150500.3.47.1
055+suse.408.g34171a9-150500.3.47.1
dracut
SUSE:Linux Enterprise Server 15 SP5-LTSS
 before 055+suse.408.g34171a9-150500.3.47.1
055+suse.408.g34171a9-150500.3.47.1
dracut
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
 before 055+suse.408.g34171a9-150500.3.47.1
055+suse.408.g34171a9-150500.3.47.1
dracut
Ubuntu:Pro:22.04:LTS
 before 051-1ubuntu0.1~esm1, plus listed versions
051-1
051-1ubuntu0.1~esm1
dracut
Ubuntu:Pro:16.04:LTS
 before 044+3-3ubuntu0.1~esm1, plus listed versions
043-2043-4044+3-1044+3-2044+3-3
044+3-3ubuntu0.1~esm1
dracut
Ubuntu:Pro:18.04:LTS
 before 047-2ubuntu0.1~esm1, plus listed versions
045+132-1047-2
047-2ubuntu0.1~esm1
dracut
Ubuntu:Pro:20.04:LTS
 before 048+80-2ubuntu0.1~esm1, plus listed versions
048+80-2
048+80-2ubuntu0.1~esm1
dracut
Ubuntu:24.04:LTS
 before 060+5-1ubuntu3.4, plus listed versions
059-4ubuntu2060+5-1ubuntu1060+5-1ubuntu2060+5-1ubuntu3060+5-1ubuntu3.1060+5-1ubuntu3.2060+5-1ubuntu3.3
060+5-1ubuntu3.4
dracut
Ubuntu:26.04:LTS
 before 110-11ubuntu0.1, plus listed versions
108-3ubuntu3108-8ubuntu1109-5ubuntu1109-7ubuntu1109-9ubuntu1
Show 7 moreShow less
109-11ubuntu1110-1ubuntu2110-3ubuntu1110-5110-7110-10110-11
110-11ubuntu0.1
dracut
openSUSE:Tumbleweed
 before 112+suse.47.gec0b378-1.1
112+suse.47.gec0b378-1.1
dracut
openSUSE:Leap 16.0
 before 059+suse.730.g73d3411aa-160000.1.1
059+suse.730.g73d3411aa-160000.1.1

History

History
RecordedChangedSources
factsCVE List, EUVD, OSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-16445 is a high vulnerability (CVSS 7.5) in Red Hat Enterprise Linux 10, published June 18, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.22%, the 88th percentile. Fixed in dracut 112-1.

References

Show 47 moreShow less
This page doesn't list everything

Left out here: 34 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open