Every CVE Search/ Get API key

CVE-2026-6893

Dracut: dracut: root code execution via dhcp options command injection

7.5 HighFix available

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.

Attack profile

How easy it is to exploit

Attack vector
Adjacent network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.27%Up 1.1 points since Jun 11, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.5

Dracut: dracut: root code execution via dhcp options command injection

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.

Record
CVE-2026-6893
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-78, CWE-78
Updated
2026-11-02
EUVDEUVD-2026-36110 7.5

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.

Record
EUVD-2026-36110
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-m789-mmmh-7vqc 8.8

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this...

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.

Record
GHSA-m789-mmmh-7vqc
CVSS 3.1
8.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-78
Updated
2026-11-02
NVD 7.5

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.

Record
CVE-2026-6893
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-78
Updated
2026-11-02
OSVBELL-CVE-2026-6893 7.5
Record
BELL-CVE-2026-6893
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2026-6893 7.5

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.

Record
DEBIAN-CVE-2026-6893
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 46 moreShow less
OSVOESA-2026-3136 7.5

dracut security update

dracut contains tools to create bootable initramfses for the Linux kernel. Unlike previous implementations, dracut hard-codes as little as possible into the initramfs. dracut contains various modules which are driven by the event-based udev. Having root on MD, DM, LVM2, LUKS is supported as well as NFS, iSCSI, NBD, FCoE with the dracut-network package.

Security Fix(es):

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.(CVE-2026-6893)

Record
OESA-2026-3136
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:26532 7.5

Red Hat Security Advisory: dracut security update

Record
RHSA-2026:26532
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:26533 7.5

Red Hat Security Advisory: dracut security update

Record
RHSA-2026:26533
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:26534 7.5

Red Hat Security Advisory: dracut security update

Record
RHSA-2026:26534
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:26713 7.5

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:26713
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:57580 7.5

Red Hat Security Advisory: dracut security update

Record
RHSA-2026:57580
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:57772 7.5

Red Hat Security Advisory: dracut security update

Record
RHSA-2026:57772
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:57775 7.5

Red Hat Security Advisory: dracut security update

Record
RHSA-2026:57775
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:57785 7.5

Red Hat Security Advisory: dracut security update

Record
RHSA-2026:57785
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:61252 7.5

Red Hat Security Advisory: dracut security update

Record
RHSA-2026:61252
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:62269 7.5

Red Hat Security Advisory: dracut security update

Record
RHSA-2026:62269
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:69118 7.5

Red Hat Security Advisory: dracut security update

Record
RHSA-2026:69118
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:69119 7.5

Red Hat Security Advisory: dracut security update

Record
RHSA-2026:69119
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:74499 7.5

Red Hat Security Advisory: dracut security update

Record
RHSA-2026:74499
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:79114 7.5

Red Hat Security Advisory: dracut security, bug fix, and enhancement update

Record
RHSA-2026:79114
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:26532 7.5

Important: dracut security update

The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition.

Security Fix(es):

  • dracut: dracut: Root code execution via DHCP options command injection (CVE-2026-6893)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:26532
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:26533 7.5

Important: dracut security update

The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition.

Security Fix(es):

  • dracut: dracut: Root code execution via DHCP options command injection (CVE-2026-6893)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:26533
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:26534 7.5

Important: dracut security update

The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition.

Security Fix(es):

  • dracut: dracut: Root code execution via DHCP options command injection (CVE-2026-6893)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:26534
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-6893 7.5

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.

Record
UBUNTU-CVE-2026-6893
CVSS 3.1
7.5 HighCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2026:26532 No score

Important: dracut security update

The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition.

Security Fix(es):

  • dracut: dracut: Root code execution via DHCP options command injection (CVE-2026-6893)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:26532
Updated
2026-11-02
OSVALSA-2026:26533 No score

Important: dracut security update

The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition.

Security Fix(es):

  • dracut: dracut: Root code execution via DHCP options command injection (CVE-2026-6893)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:26533
Updated
2026-11-02
OSVALSA-2026:26534 No score

Important: dracut security update

The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition.

Security Fix(es):

  • dracut: dracut: Root code execution via DHCP options command injection (CVE-2026-6893)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:26534
Updated
2026-11-02
OSVAZL-90111 No score

CVE-2026-6893 affecting package dracut 102-13

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.

Record
AZL-90111
Updated
2026-11-02
OSVCLSA-2026-1782829348 No score

dracut: Fix of CVE-2026-6893

  • CVE-2026-6893: fix network-legacy injection via DHCP hostname/gateway
Record
CLSA-2026-1782829348
Updated
2026-11-02
OSVCLSA-2026-1783076363 No score

dracut: Fix of CVE-2026-6893

  • CVE-2026-6893: fix shell command injection via crafted DHCP and iBFT values in network-legacy, net-lib, initqueue, and iscsi modules
Record
CLSA-2026-1783076363
Updated
2026-11-02
OSVCLSA-2026-1787307553 No score

dracut: Fix of CVE-2026-6893

  • CVE-2026-6893: escape the DHCP-provided hostname, gateway and iSCSI LUN written into the shell scripts that the initramfs later sources
Record
CLSA-2026-1787307553
Updated
2026-11-02
OSVopenSUSE-SU-2026:11076-1 No score

dracut-110+suse.35.g9834432-1.1 on GA media

These are all security issues fixed in the dracut-110+suse.35.g9834432-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11076-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21054-1 No score

Security update for dracut

This update for dracut fixes the following issue

  • CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).

Changes for dracut:

  • Update to version 059+suse.722.gdd9d67ff5:
  • fix(network-legacy): sanitize DHCP values in dhclient-script.sh (bsc#1268322, CVE-2026-6893)
  • fix(network-legacy): add input validation to RFC 3442 route parser
Record
openSUSE-SU-2026:21054-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21749-1 No score

Security update for dracut

This update for dracut fixes the following issues:

Update to version 059+suse.730.g73d3411aa.

  • CVE-2026-6893: improper handling and escaping of DHCP options can lead to command injection and root code execution within the initramfs (bsc#1268322).
  • CVE-2026-16445: improper handling and escaping of DHCP options can lead to command injection and root code execution within the initramfs during system boot (bsc#1273580).

Changes for dracut:

  • Update to version 059+suse.730.g73d3411aa:
    • fix(network-legacy): sanitize values written to /tmp/net.${netif}.override
    • fix(network-legacy): sanitize values written to /tmp/net.${netif}.gw
    • fix(network-legacy): sanitize values written to /tmp/net.${netif}.hostname
    • fix(network-legacy): strip DHCP-supplied domain to a safe charset
Record
openSUSE-SU-2026:21749-1
Updated
2026-11-02
OSVSUSE-SU-2026:22273-1 No score

Security update for dracut

This update for dracut fixes the following issue

  • CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).

Changes for dracut:

  • Update to version 059+suse.722.gdd9d67ff5:
  • fix(network-legacy): sanitize DHCP values in dhclient-script.sh (bsc#1268322, CVE-2026-6893)
  • fix(network-legacy): add input validation to RFC 3442 route parser
Record
SUSE-SU-2026:22273-1
Updated
2026-11-02
OSVSUSE-SU-2026:22358-1 No score

Security update for dracut

This update for dracut fixes the following issue

  • CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).

Changes for dracut:

  • Update to version 059+suse.722.gdd9d67ff5:
  • fix(network-legacy): sanitize DHCP values in dhclient-script.sh (bsc#1268322, CVE-2026-6893)
  • fix(network-legacy): add input validation to RFC 3442 route parser
Record
SUSE-SU-2026:22358-1
Updated
2026-11-02
OSVSUSE-SU-2026:22431-1 No score

Security update for dracut

This update for dracut fixes the following issue

  • CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).

Changes for dracut:

  • Update to version 059+suse.609.g1a2492e:
  • fix(network-legacy): sanitize DHCP values in dhclient-script.sh (bsc#1268322, CVE-2026-6893)
  • fix(network-legacy): add input validation to RFC 3442 route parser
Record
SUSE-SU-2026:22431-1
Updated
2026-11-02
OSVSUSE-SU-2026:22446-1 No score

Security update for dracut

This update for dracut fixes the following issue

  • CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).

Changes for dracut:

  • Update to version 059+suse.643.g1f1d880:
  • fix(network-legacy): sanitize DHCP values in dhclient-script.sh (bsc#1268322, CVE-2026-6893)
  • fix(network-legacy): add input validation to RFC 3442 route parser
Record
SUSE-SU-2026:22446-1
Updated
2026-11-02
OSVSUSE-SU-2026:23444-1 No score

Security update for dracut

This update for dracut fixes the following issues:

  • CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).
  • CVE-2026-16445: Root code execution via DHCP options command injection in NetworkManager initrd module (bsc#1273580).

Changes for dracut:

  • Update to version 059+suse.615.g018c5a4:
  • fix(network-legacy): sanitize values written to /tmp/net.${netif}.override
  • fix(network-legacy): sanitize values written to /tmp/net.${netif}.gw
  • fix(network-legacy): sanitize values written to /tmp/net.${netif}.hostname
  • fix(network-legacy): strip DHCP-supplied domain to a safe charset
  • fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
Record
SUSE-SU-2026:23444-1
Updated
2026-11-02
OSVSUSE-SU-2026:23466-1 No score

Security update for dracut

This update for dracut fixes the following issues:

Update to version 059+suse.730.g73d3411aa.

  • CVE-2026-6893: improper handling and escaping of DHCP options can lead to command injection and root code execution within the initramfs (bsc#1268322).
  • CVE-2026-16445: improper handling and escaping of DHCP options can lead to command injection and root code execution within the initramfs during system boot (bsc#1273580).

Changes for dracut:

  • Update to version 059+suse.730.g73d3411aa:
    • fix(network-legacy): sanitize values written to /tmp/net.${netif}.override
    • fix(network-legacy): sanitize values written to /tmp/net.${netif}.gw
    • fix(network-legacy): sanitize values written to /tmp/net.${netif}.hostname
    • fix(network-legacy): strip DHCP-supplied domain to a safe charset
Record
SUSE-SU-2026:23466-1
Updated
2026-11-02
OSVSUSE-SU-2026:23513-1 No score

Security update for dracut

This update for dracut fixes the following issues:

  • CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).
  • CVE-2026-16445: Root code execution via DHCP options command injection in NetworkManager initrd module (bsc#1273580).

Changes for dracut:

  • Update to version 059+suse.649.g0274006:
  • fix(network-legacy): sanitize values written to /tmp/net.${netif}.override
  • fix(network-legacy): sanitize values written to /tmp/net.${netif}.gw
  • fix(network-legacy): sanitize values written to /tmp/net.${netif}.hostname
  • fix(network-legacy): strip DHCP-supplied domain to a safe charset
  • fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
Record
SUSE-SU-2026:23513-1
Updated
2026-11-02
OSVSUSE-SU-2026:23614-1 No score

Security update for dracut

This update for dracut fixes the following issues:

Update to version 059+suse.730.g73d3411aa.

  • CVE-2026-6893: improper handling and escaping of DHCP options can lead to command injection and root code execution within the initramfs (bsc#1268322).
  • CVE-2026-16445: improper handling and escaping of DHCP options can lead to command injection and root code execution within the initramfs during system boot (bsc#1273580).

Changes for dracut:

  • Update to version 059+suse.730.g73d3411aa:
    • fix(network-legacy): sanitize values written to /tmp/net.${netif}.override
    • fix(network-legacy): sanitize values written to /tmp/net.${netif}.gw
    • fix(network-legacy): sanitize values written to /tmp/net.${netif}.hostname
    • fix(network-legacy): strip DHCP-supplied domain to a safe charset
Record
SUSE-SU-2026:23614-1
Updated
2026-11-02
OSVSUSE-SU-2026:2720-1 No score

Security update for dracut

This update for dracut fixes the following issue

  • CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).

Changes for dracut:

  • Update to version 055+suse.365.g79144c5:
  • fix(network-legacy): sanitize DHCP values in dhclient-script.sh (bsc#1268322, CVE-2026-6893)
  • fix(network-legacy): add input validation to RFC 3442 route parser
Record
SUSE-SU-2026:2720-1
Updated
2026-11-02
OSVSUSE-SU-2026:2721-1 No score

Security update for dracut

This update for dracut fixes the following issue

  • CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).

Changes for dracut:

  • Update to version 055+suse.402.g2720eea:
  • fix(network-legacy): sanitize DHCP values in dhclient-script.sh (bsc#1268322, CVE-2026-6893)
  • fix(network-legacy): add input validation to RFC 3442 route parser
Record
SUSE-SU-2026:2721-1
Updated
2026-11-02
OSVSUSE-SU-2026:2803-1 No score

Security update for dracut

This update for dracut fixes the following issue

  • CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).

Changes for dracut:

  • Update to version 059+suse.565.g682306ec5:
  • fix(network-legacy): sanitize DHCP values in dhclient-script.sh (bsc#1268322, CVE-2026-6893)
  • fix(network-legacy): add input validation to RFC 3442 route parser
Record
SUSE-SU-2026:2803-1
Updated
2026-11-02
OSVSUSE-SU-2026:2851-1 No score

Security update for dracut

This update for dracut fixes the following issue

  • CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).

Changes for dracut:

  • Update to version 059+suse.570.g2b84048d7:
  • fix(network-legacy): sanitize DHCP values in dhclient-script.sh (bsc#1268322, CVE-2026-6893)
  • fix(network-legacy): add input validation to RFC 3442 route parser
Record
SUSE-SU-2026:2851-1
Updated
2026-11-02
OSVSUSE-SU-2026:3931-1 No score

Security update for dracut

This update for dracut fixes the following issues:

  • CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).
  • CVE-2026-16445: Root code execution via DHCP options command injection in NetworkManager initrd module (bsc#1273580).

Changes for dracut:

  • Update to version 059+suse.576.g72b98359a:
  • fix(network-legacy): sanitize values written to /tmp/net.${netif}.override
  • fix(network-legacy): sanitize values written to /tmp/net.${netif}.gw
  • fix(network-legacy): sanitize values written to /tmp/net.${netif}.hostname
  • fix(network-legacy): strip DHCP-supplied domain to a safe charset
Record
SUSE-SU-2026:3931-1
Updated
2026-11-02
OSVSUSE-SU-2026:3997-1 No score

Security update for dracut

This update for dracut fixes the following issues:

Update to version 059+suse.730.g73d3411aa.

  • CVE-2026-6893: improper handling and escaping of DHCP options can lead to command injection and root code execution within the initramfs (bsc#1268322).
  • CVE-2026-16445: improper handling and escaping of DHCP options can lead to command injection and root code execution within the initramfs during system boot (bsc#1273580).

Changes for dracut:

  • Update to version 059+suse.730.g73d3411aa:
    • fix(network-legacy): sanitize values written to /tmp/net.${netif}.override
    • fix(network-legacy): sanitize values written to /tmp/net.${netif}.gw
    • fix(network-legacy): sanitize values written to /tmp/net.${netif}.hostname
    • fix(network-legacy): strip DHCP-supplied domain to a safe charset
Record
SUSE-SU-2026:3997-1
Updated
2026-11-02
OSVSUSE-SU-2026:4078-1 No score

Security update for dracut

This update for dracut fixes the following issues:

  • CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).
  • CVE-2026-16445: Root code execution via DHCP options command injection in NetworkManager initrd module (bsc#1273580).

Changes for dracut:

  • Update to version 055+suse.371.g92f67c2:
  • fix(network-legacy): sanitize values written to /tmp/net.${netif}.override
  • fix(network-legacy): sanitize values written to /tmp/net.${netif}.gw
  • fix(network-legacy): sanitize values written to /tmp/net.${netif}.hostname
  • fix(network-legacy): strip DHCP-supplied domain to a safe charset
Record
SUSE-SU-2026:4078-1
Updated
2026-11-02
OSVSUSE-SU-2026:4079-1 No score

Security update for dracut

This update for dracut fixes the following issues:

  • CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).
  • CVE-2026-16445: Root code execution via DHCP options command injection in NetworkManager initrd module (bsc#1273580).

Changes for dracut:

  • Update to version 055+suse.408.g34171a9:
  • fix(network-legacy): sanitize values written to /tmp/net.${netif}.override
  • fix(network-legacy): sanitize values written to /tmp/net.${netif}.gw
  • fix(network-legacy): sanitize values written to /tmp/net.${netif}.hostname
  • fix(network-legacy): strip DHCP-supplied domain to a safe charset
Record
SUSE-SU-2026:4079-1
Updated
2026-11-02
OSVUSN-8828-1 No score

dracut vulnerabilities

It was discovered that dracut created initramfs images with overly permissive permissions under certain circumstances. A local attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-8637)

It was discovered that dracut did not properly sanitize DHCP options before writing them to shell scripts under certain circumstances. A remote attacker controlling a DHCP server on the local network could possibly use this issue to execute arbitrary code as root during system boot. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2026-6893)

It was discovered that dracut did not properly quote error messages written to shell scripts under certain circumstances. A remote attacker controlling a DHCP server on the local network could possibly use this issue to execute arbitrary code as root during system boot. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2026-15816)

It was discovered that dracut did not properly sanitize network configuration data before writing it to a temporary shell script under certain circumstances. A remote attacker controlling DHCP on the local network could possibly use this issue to execute arbitrary code as root during system boot. This issue only affected Ubuntu 22.04 LTS. (CVE-2026-16445)

Record
USN-8828-1
Updated
2026-11-02

Affected products

Show 14 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
dracut
AlmaLinux:10
 before 107-7.el10_2
107-7.el10_2
dracut-caps
AlmaLinux:10
 before 107-7.el10_2
107-7.el10_2
dracut-config-generic
AlmaLinux:10
 before 107-7.el10_2
107-7.el10_2
dracut-config-rescue
AlmaLinux:10
 before 107-7.el10_2
107-7.el10_2
dracut-live
AlmaLinux:10
 before 107-7.el10_2
107-7.el10_2
dracut-network
AlmaLinux:10
 before 107-7.el10_2
107-7.el10_2
dracut-squash
AlmaLinux:10
 before 107-7.el10_2
107-7.el10_2
dracut-tools
AlmaLinux:10
 before 107-7.el10_2
107-7.el10_2
dracut
AlmaLinux:9
 before 057-115.git20260527.el9_8
057-115.git20260527.el9_8
dracut-caps
AlmaLinux:9
 before 057-115.git20260527.el9_8
057-115.git20260527.el9_8
Show 209 moreShow less
Affected packages
PackageAffectedFixed
dracut-config-generic
AlmaLinux:9
 before 057-115.git20260527.el9_8
057-115.git20260527.el9_8
dracut-config-rescue
AlmaLinux:9
 before 057-115.git20260527.el9_8
057-115.git20260527.el9_8
dracut-live
AlmaLinux:9
 before 057-115.git20260527.el9_8
057-115.git20260527.el9_8
dracut-network
AlmaLinux:9
 before 057-115.git20260527.el9_8
057-115.git20260527.el9_8
dracut-squash
AlmaLinux:9
 before 057-115.git20260527.el9_8
057-115.git20260527.el9_8
dracut-tools
AlmaLinux:9
 before 057-115.git20260527.el9_8
057-115.git20260527.el9_8
dracut
AlmaLinux:8
 before 049-244.git20260529.el8_10
049-244.git20260529.el8_10
dracut-caps
AlmaLinux:8
 before 049-244.git20260529.el8_10
049-244.git20260529.el8_10
dracut-config-generic
AlmaLinux:8
 before 049-244.git20260529.el8_10
049-244.git20260529.el8_10
dracut-config-rescue
AlmaLinux:8
 before 049-244.git20260529.el8_10
049-244.git20260529.el8_10
dracut-live
AlmaLinux:8
 before 049-244.git20260529.el8_10
049-244.git20260529.el8_10
dracut-network
AlmaLinux:8
 before 049-244.git20260529.el8_10
049-244.git20260529.el8_10
dracut-squash
AlmaLinux:8
 before 049-244.git20260529.el8_10
049-244.git20260529.el8_10
dracut-tools
AlmaLinux:8
 before 049-244.git20260529.el8_10
049-244.git20260529.el8_10
dracut
Azure Linux:3
 through 102-13 None known
dracut
Alpaquita:23
 055-r23 and later None known
dracut
Alpaquita:25
 055-r34 and later None known
dracut
Alpaquita:stream
 055-r25 and later None known
dracut
TuxCare:AlmaLinux:9.6
 before 057-89.git20250311.el9_6.tuxcare.els1
057-89.git20250311.el9_6.tuxcare.els1
dracut-caps
TuxCare:AlmaLinux:9.6
 before 057-89.git20250311.el9_6.tuxcare.els1
057-89.git20250311.el9_6.tuxcare.els1
dracut-config-generic
TuxCare:AlmaLinux:9.6
 before 057-89.git20250311.el9_6.tuxcare.els1
057-89.git20250311.el9_6.tuxcare.els1
dracut-config-rescue
TuxCare:AlmaLinux:9.6
 before 057-89.git20250311.el9_6.tuxcare.els1
057-89.git20250311.el9_6.tuxcare.els1
dracut-live
TuxCare:AlmaLinux:9.6
 before 057-89.git20250311.el9_6.tuxcare.els1
057-89.git20250311.el9_6.tuxcare.els1
dracut-network
TuxCare:AlmaLinux:9.6
 before 057-89.git20250311.el9_6.tuxcare.els1
057-89.git20250311.el9_6.tuxcare.els1
dracut-squash
TuxCare:AlmaLinux:9.6
 before 057-89.git20250311.el9_6.tuxcare.els1
057-89.git20250311.el9_6.tuxcare.els1
dracut-tools
TuxCare:AlmaLinux:9.6
 before 057-89.git20250311.el9_6.tuxcare.els1
057-89.git20250311.el9_6.tuxcare.els1
dracut
TuxCare:AlmaLinux:9.2
 before 057-21.git20230214.el9.tuxcare.els1
057-21.git20230214.el9.tuxcare.els1
dracut-caps
TuxCare:AlmaLinux:9.2
 before 057-21.git20230214.el9.tuxcare.els1
057-21.git20230214.el9.tuxcare.els1
dracut-config-generic
TuxCare:AlmaLinux:9.2
 before 057-21.git20230214.el9.tuxcare.els1
057-21.git20230214.el9.tuxcare.els1
dracut-config-rescue
TuxCare:AlmaLinux:9.2
 before 057-21.git20230214.el9.tuxcare.els1
057-21.git20230214.el9.tuxcare.els1
dracut-live
TuxCare:AlmaLinux:9.2
 before 057-21.git20230214.el9.tuxcare.els1
057-21.git20230214.el9.tuxcare.els1
dracut-network
TuxCare:AlmaLinux:9.2
 before 057-21.git20230214.el9.tuxcare.els1
057-21.git20230214.el9.tuxcare.els1
dracut-squash
TuxCare:AlmaLinux:9.2
 before 057-21.git20230214.el9.tuxcare.els1
057-21.git20230214.el9.tuxcare.els1
dracut-tools
TuxCare:AlmaLinux:9.2
 before 057-21.git20230214.el9.tuxcare.els1
057-21.git20230214.el9.tuxcare.els1
dracut
TuxCare:CentOS:7
 before 033-572.el7.tuxcare.els1
033-572.el7.tuxcare.els1
dracut-caps
TuxCare:CentOS:7
 before 033-572.el7.tuxcare.els1
033-572.el7.tuxcare.els1
dracut-config-generic
TuxCare:CentOS:7
 before 033-572.el7.tuxcare.els1
033-572.el7.tuxcare.els1
dracut-config-rescue
TuxCare:CentOS:7
 before 033-572.el7.tuxcare.els1
033-572.el7.tuxcare.els1
dracut-fips
TuxCare:CentOS:7
 before 033-572.el7.tuxcare.els1
033-572.el7.tuxcare.els1
dracut-fips-aesni
TuxCare:CentOS:7
 before 033-572.el7.tuxcare.els1
033-572.el7.tuxcare.els1
dracut-network
TuxCare:CentOS:7
 before 033-572.el7.tuxcare.els1
033-572.el7.tuxcare.els1
dracut-tools
TuxCare:CentOS:7
 before 033-572.el7.tuxcare.els1
033-572.el7.tuxcare.els1
dracut
Debian:12
 All versions, plus listed versions
059+212-1059+212-2059+212-3059+212-4059-4
Show 45 moreShow less
060+5-1060+5-2~exp1060+5-7060+5-8102-1102-2102-3103-1103-1.1103-2105-1105-2105-2~exp1105-2~exp2105-2~exp3105-2~exp4105-2~exp5105-2~exp6105-2~exp7105-2~exp8105-3106-1106-2106-3106-4106-5106-5~bpo12+1106-6107-1107-2108-1108-2108-3108-4108-5108-6108-7108-8109-1109-10109-11109-1exp1109-2109-3109-4
 None known
dracut
Debian:13
 All versions, plus listed versions
106-6107-1107-2108-1108-2
Show 45 moreShow less
108-3108-4108-5108-6108-7108-8109-1109-10109-11109-1exp1109-2109-3109-4109-5109-6109-6exp1109-6exp2109-6exp3109-7109-8109-9110-1110-10110-11110-12110-2110-3110-4110-5110-6110-7110-8110-9111-1111-2111-3111-4111-5111-6112-1112-2112-3112-4112-5112-6
 None known
dracut
Debian:14
 before 112-1, plus listed versions
106-6107-1107-2108-1108-2
Show 39 moreShow less
108-3108-4108-5108-6108-7108-8109-1109-10109-11109-1exp1109-2109-3109-4109-5109-6109-6exp1109-6exp2109-6exp3109-7109-8109-9110-1110-10110-11110-12110-2110-3110-4110-5110-6110-7110-8110-9111-1111-2111-3111-4111-5111-6
112-1
dracut
openEuler:24.03-LTS-SP4
 before 059-17.oe2403sp4
059-17.oe2403sp4
dracut
openEuler:20.03-LTS-SP4
 before 050-11.oe2003sp4
050-11.oe2003sp4
dracut
openEuler:22.03-LTS-SP4
 before 055-18.oe2203sp4
055-18.oe2203sp4
dracut
openEuler:24.03-LTS-SP1
 before 059-17.oe2403sp1
059-17.oe2403sp1
dracut
openEuler:24.03-LTS-SP3
 before 059-17.oe2403sp3
059-17.oe2403sp3
dracut-caps
Red Hat:enterprise_linux:10.2
 before 0:107-7.el10_2
0:107-7.el10_2
dracut-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:107-7.el10_2
0:107-7.el10_2
dracut-debugsource
Red Hat:enterprise_linux:10.2
 before 0:107-7.el10_2
0:107-7.el10_2
dracut-live
Red Hat:enterprise_linux:10.2
 before 0:107-7.el10_2
0:107-7.el10_2
dracut
Red Hat:enterprise_linux:10.2
 before 0:107-7.el10_2
0:107-7.el10_2
dracut-config-generic
Red Hat:enterprise_linux:10.2
 before 0:107-7.el10_2
0:107-7.el10_2
dracut-config-rescue
Red Hat:enterprise_linux:10.2
 before 0:107-7.el10_2
0:107-7.el10_2
dracut-network
Red Hat:enterprise_linux:10.2
 before 0:107-7.el10_2
0:107-7.el10_2
dracut-squash
Red Hat:enterprise_linux:10.2
 before 0:107-7.el10_2
0:107-7.el10_2
dracut-tools
Red Hat:enterprise_linux:10.2
 before 0:107-7.el10_2
0:107-7.el10_2
dracut-caps
Red Hat:enterprise_linux:9::appstream
 before 0:057-115.git20260527.el9_8
0:057-115.git20260527.el9_8
dracut-debuginfo
Red Hat:enterprise_linux:9::appstream
 before 0:057-115.git20260527.el9_8
0:057-115.git20260527.el9_8
dracut-debugsource
Red Hat:enterprise_linux:9::appstream
 before 0:057-115.git20260527.el9_8
0:057-115.git20260527.el9_8
dracut-live
Red Hat:enterprise_linux:9::appstream
 before 0:057-115.git20260527.el9_8
0:057-115.git20260527.el9_8
dracut
Red Hat:enterprise_linux:9::baseos
 before 0:057-115.git20260527.el9_8
0:057-115.git20260527.el9_8
dracut-config-generic
Red Hat:enterprise_linux:9::baseos
 before 0:057-115.git20260527.el9_8
0:057-115.git20260527.el9_8
dracut-config-rescue
Red Hat:enterprise_linux:9::baseos
 before 0:057-115.git20260527.el9_8
0:057-115.git20260527.el9_8
dracut-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:057-115.git20260527.el9_8
0:057-115.git20260527.el9_8
dracut-debugsource
Red Hat:enterprise_linux:9::baseos
 before 0:057-115.git20260527.el9_8
0:057-115.git20260527.el9_8
dracut-network
Red Hat:enterprise_linux:9::baseos
 before 0:057-115.git20260527.el9_8
0:057-115.git20260527.el9_8
dracut-squash
Red Hat:enterprise_linux:9::baseos
 before 0:057-115.git20260527.el9_8
0:057-115.git20260527.el9_8
dracut-tools
Red Hat:enterprise_linux:9::baseos
 before 0:057-115.git20260527.el9_8
0:057-115.git20260527.el9_8
dracut
Red Hat:enterprise_linux:8::baseos
 before 0:049-244.git20260529.el8_10
0:049-244.git20260529.el8_10
dracut-caps
Red Hat:enterprise_linux:8::baseos
 before 0:049-244.git20260529.el8_10
0:049-244.git20260529.el8_10
dracut-config-generic
Red Hat:enterprise_linux:8::baseos
 before 0:049-244.git20260529.el8_10
0:049-244.git20260529.el8_10
dracut-config-rescue
Red Hat:enterprise_linux:8::baseos
 before 0:049-244.git20260529.el8_10
0:049-244.git20260529.el8_10
dracut-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:049-244.git20260529.el8_10
0:049-244.git20260529.el8_10
dracut-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:049-244.git20260529.el8_10
0:049-244.git20260529.el8_10
dracut-live
Red Hat:enterprise_linux:8::baseos
 before 0:049-244.git20260529.el8_10
0:049-244.git20260529.el8_10
dracut-network
Red Hat:enterprise_linux:8::baseos
 before 0:049-244.git20260529.el8_10
0:049-244.git20260529.el8_10
dracut-squash
Red Hat:enterprise_linux:8::baseos
 before 0:049-244.git20260529.el8_10
0:049-244.git20260529.el8_10
dracut-tools
Red Hat:enterprise_linux:8::baseos
 before 0:049-244.git20260529.el8_10
0:049-244.git20260529.el8_10
dracut
Red Hat:hummingbird:1
 before 0:109-6.hum1
0:109-6.hum1
dracut-caps
Red Hat:hummingbird:1
 before 0:109-6.hum1
0:109-6.hum1
dracut-config-generic
Red Hat:hummingbird:1
 before 0:109-6.hum1
0:109-6.hum1
dracut-config-rescue
Red Hat:hummingbird:1
 before 0:109-6.hum1
0:109-6.hum1
dracut-live
Red Hat:hummingbird:1
 before 0:109-6.hum1
0:109-6.hum1
dracut-network
Red Hat:hummingbird:1
 before 0:109-6.hum1
0:109-6.hum1
dracut-squash
Red Hat:hummingbird:1
 before 0:109-6.hum1
0:109-6.hum1
dracut-tools
Red Hat:hummingbird:1
 before 0:109-6.hum1
0:109-6.hum1
dracut
Red Hat:enterprise_linux_eus:10.0
 before 0:105-4.el10_0.1
0:105-4.el10_0.1
dracut-network
Red Hat:enterprise_linux_eus:10.0
 before 0:105-4.el10_0.1
0:105-4.el10_0.1
dracut
Red Hat:rhel_eus:9.6::baseos
 before 0:057-89.git20250311.el9_6.1
0:057-89.git20250311.el9_6.1
dracut-network
Red Hat:rhel_eus:9.6::baseos
 before 0:057-89.git20250311.el9_6.1
0:057-89.git20250311.el9_6.1
dracut
Red Hat:rhel_e4s:9.2::baseos
 before 0:057-25.git20250717.el9_2.2
0:057-25.git20250717.el9_2.2
dracut-network
Red Hat:rhel_e4s:9.2::baseos
 before 0:057-25.git20250717.el9_2.2
0:057-25.git20250717.el9_2.2
dracut
Red Hat:rhel_e4s:9.4::baseos
 before 0:057-54.git20250423.el9_4.3
0:057-54.git20250423.el9_4.3
dracut-network
Red Hat:rhel_e4s:9.4::baseos
 before 0:057-54.git20250423.el9_4.3
0:057-54.git20250423.el9_4.3
dracut
Red Hat:rhel_e4s:8.8::baseos
 before 0:049-223.git20230119.el8_8.1
0:049-223.git20230119.el8_8.1
dracut-network
Red Hat:rhel_e4s:8.8::baseos
 before 0:049-223.git20230119.el8_8.1
0:049-223.git20230119.el8_8.1
dracut
Red Hat:rhel_tus:8.8::baseos
 before 0:049-223.git20230119.el8_8.1
0:049-223.git20230119.el8_8.1
dracut-network
Red Hat:rhel_tus:8.8::baseos
 before 0:049-223.git20230119.el8_8.1
0:049-223.git20230119.el8_8.1
dracut
Red Hat:rhel_els:7
 before 0:033-577.el7_9
0:033-577.el7_9
dracut-network
Red Hat:rhel_els:7
 before 0:033-577.el7_9
0:033-577.el7_9
dracut
Red Hat:rhel_aus:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-caps
Red Hat:rhel_aus:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-config-generic
Red Hat:rhel_aus:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-config-rescue
Red Hat:rhel_aus:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-debuginfo
Red Hat:rhel_aus:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-debugsource
Red Hat:rhel_aus:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-live
Red Hat:rhel_aus:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-network
Red Hat:rhel_aus:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-squash
Red Hat:rhel_aus:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-tools
Red Hat:rhel_aus:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-caps
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-config-generic
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-config-rescue
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-debuginfo
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-debugsource
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-live
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-network
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-squash
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut-tools
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:049-138.git20220131.el8_4.1
0:049-138.git20220131.el8_4.1
dracut
Red Hat:rhel_aus:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-caps
Red Hat:rhel_aus:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-config-generic
Red Hat:rhel_aus:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-config-rescue
Red Hat:rhel_aus:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-debuginfo
Red Hat:rhel_aus:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-debugsource
Red Hat:rhel_aus:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-live
Red Hat:rhel_aus:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-network
Red Hat:rhel_aus:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-squash
Red Hat:rhel_aus:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-tools
Red Hat:rhel_aus:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-caps
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-config-generic
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-config-rescue
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-debuginfo
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-debugsource
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-live
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-network
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-squash
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut-tools
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:049-203.git20220511.el8_6.1
0:049-203.git20220511.el8_6.1
dracut
Red Hat:rhel_els:6
 before 0:004-413.el6_10
0:004-413.el6_10
dracut-fips
Red Hat:rhel_els:6
 before 0:004-413.el6_10
0:004-413.el6_10
dracut-kernel
Red Hat:rhel_els:6
 before 0:004-413.el6_10
0:004-413.el6_10
dracut-network
Red Hat:rhel_els:6
 before 0:004-413.el6_10
0:004-413.el6_10
dracut-caps
Red Hat:rhel_els:6
 before 0:004-413.el6_10
0:004-413.el6_10
dracut-fips-aesni
Red Hat:rhel_els:6
 before 0:004-413.el6_10
0:004-413.el6_10
dracut-generic
Red Hat:rhel_els:6
 before 0:004-413.el6_10
0:004-413.el6_10
dracut-tools
Red Hat:rhel_els:6
 before 0:004-413.el6_10
0:004-413.el6_10
dracut
Red Hat:rhel_els:6
 before 0:004-414.el6_10
0:004-414.el6_10
dracut-network
Red Hat:rhel_els:6
 before 0:004-414.el6_10
0:004-414.el6_10
dracut
Rocky Linux:10
 before 0:107-7.el10_2
0:107-7.el10_2
dracut
Rocky Linux:9
 before 0:057-115.git20260527.el9_8
0:057-115.git20260527.el9_8
dracut
Rocky Linux:8
 before 0:049-244.git20260529.el8_10
0:049-244.git20260529.el8_10
dracut
SUSE:Linux Micro 6.2
 before 059+suse.722.gdd9d67ff5-160000.1.1
059+suse.722.gdd9d67ff5-160000.1.1
dracut
SUSE:Linux Enterprise Server 16.0
 before 059+suse.722.gdd9d67ff5-160000.1.1
059+suse.722.gdd9d67ff5-160000.1.1
dracut
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 059+suse.722.gdd9d67ff5-160000.1.1
059+suse.722.gdd9d67ff5-160000.1.1
dracut
SUSE:Linux Micro 6.0
 before 059+suse.609.g1a2492e-1.1
059+suse.609.g1a2492e-1.1
dracut
SUSE:Linux Micro 6.1
 before 059+suse.643.g1f1d880-slfo.1.1_1.1
059+suse.643.g1f1d880-slfo.1.1_1.1
dracut
SUSE:Linux Micro 6.0
 before 059+suse.615.g018c5a4-1.1
059+suse.615.g018c5a4-1.1
dracut
SUSE:Linux Micro 6.2
 before 059+suse.730.g73d3411aa-160000.1.1
059+suse.730.g73d3411aa-160000.1.1
dracut
SUSE:Linux Micro 6.1
 before 059+suse.649.g0274006-slfo.1.1_1.1
059+suse.649.g0274006-slfo.1.1_1.1
dracut
SUSE:Linux Enterprise Server 16.0
 before 059+suse.730.g73d3411aa-160000.1.1
059+suse.730.g73d3411aa-160000.1.1
dracut
SUSE:Linux Enterprise Server for SAP applications 16.0
 before 059+suse.730.g73d3411aa-160000.1.1
059+suse.730.g73d3411aa-160000.1.1
dracut
SUSE:Linux Enterprise Micro 5.3
 before 055+suse.365.g79144c5-150400.3.49.1
055+suse.365.g79144c5-150400.3.49.1
dracut
SUSE:Linux Enterprise Micro 5.4
 before 055+suse.365.g79144c5-150400.3.49.1
055+suse.365.g79144c5-150400.3.49.1
dracut
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 055+suse.365.g79144c5-150400.3.49.1
055+suse.365.g79144c5-150400.3.49.1
dracut
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 055+suse.365.g79144c5-150400.3.49.1
055+suse.365.g79144c5-150400.3.49.1
dracut
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 055+suse.365.g79144c5-150400.3.49.1
055+suse.365.g79144c5-150400.3.49.1
dracut
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 055+suse.365.g79144c5-150400.3.49.1
055+suse.365.g79144c5-150400.3.49.1
dracut
SUSE:Linux Enterprise Micro 5.5
 before 055+suse.402.g2720eea-150500.3.41.1
055+suse.402.g2720eea-150500.3.41.1
dracut
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
 before 055+suse.402.g2720eea-150500.3.41.1
055+suse.402.g2720eea-150500.3.41.1
dracut
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
 before 055+suse.402.g2720eea-150500.3.41.1
055+suse.402.g2720eea-150500.3.41.1
dracut
SUSE:Linux Enterprise Server 15 SP5-LTSS
 before 055+suse.402.g2720eea-150500.3.41.1
055+suse.402.g2720eea-150500.3.41.1
dracut
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
 before 055+suse.402.g2720eea-150500.3.41.1
055+suse.402.g2720eea-150500.3.41.1
dracut
SUSE:Linux Enterprise High Availability Extension 15 SP6
 before 059+suse.565.g682306ec5-150600.3.29.1
059+suse.565.g682306ec5-150600.3.29.1
dracut
SUSE:Linux Enterprise Server 15 SP6-LTSS
 before 059+suse.565.g682306ec5-150600.3.29.1
059+suse.565.g682306ec5-150600.3.29.1
dracut
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
 before 059+suse.565.g682306ec5-150600.3.29.1
059+suse.565.g682306ec5-150600.3.29.1
dracut
SUSE:Linux Enterprise Module for Basesystem 15 SP7
 before 059+suse.570.g2b84048d7-150700.3.17.1
059+suse.570.g2b84048d7-150700.3.17.1
dracut
SUSE:Linux Enterprise High Availability Extension 15 SP7
 before 059+suse.570.g2b84048d7-150700.3.17.1
059+suse.570.g2b84048d7-150700.3.17.1
dracut
SUSE:Linux Enterprise Module for Basesystem 15 SP7
 before 059+suse.576.g72b98359a-150700.3.23.1
059+suse.576.g72b98359a-150700.3.23.1
dracut
SUSE:Linux Enterprise High Availability Extension 15 SP7
 before 059+suse.576.g72b98359a-150700.3.23.1
059+suse.576.g72b98359a-150700.3.23.1
dracut
SUSE:Linux Enterprise High Availability Extension 15 SP6
 before 059+suse.571.g3d42218af-150600.3.35.1
059+suse.571.g3d42218af-150600.3.35.1
dracut
SUSE:Linux Enterprise Server 15 SP6-LTSS
 before 059+suse.571.g3d42218af-150600.3.35.1
059+suse.571.g3d42218af-150600.3.35.1
dracut
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
 before 059+suse.571.g3d42218af-150600.3.35.1
059+suse.571.g3d42218af-150600.3.35.1
dracut
SUSE:Linux Enterprise Micro 5.3
 before 055+suse.371.g92f67c2-150400.3.55.1
055+suse.371.g92f67c2-150400.3.55.1
dracut
SUSE:Linux Enterprise Micro 5.4
 before 055+suse.371.g92f67c2-150400.3.55.1
055+suse.371.g92f67c2-150400.3.55.1
dracut
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 055+suse.371.g92f67c2-150400.3.55.1
055+suse.371.g92f67c2-150400.3.55.1
dracut
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 055+suse.371.g92f67c2-150400.3.55.1
055+suse.371.g92f67c2-150400.3.55.1
dracut
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 055+suse.371.g92f67c2-150400.3.55.1
055+suse.371.g92f67c2-150400.3.55.1
dracut
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 055+suse.371.g92f67c2-150400.3.55.1
055+suse.371.g92f67c2-150400.3.55.1
dracut
SUSE:Linux Enterprise Micro 5.5
 before 055+suse.408.g34171a9-150500.3.47.1
055+suse.408.g34171a9-150500.3.47.1
dracut
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
 before 055+suse.408.g34171a9-150500.3.47.1
055+suse.408.g34171a9-150500.3.47.1
dracut
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
 before 055+suse.408.g34171a9-150500.3.47.1
055+suse.408.g34171a9-150500.3.47.1
dracut
SUSE:Linux Enterprise Server 15 SP5-LTSS
 before 055+suse.408.g34171a9-150500.3.47.1
055+suse.408.g34171a9-150500.3.47.1
dracut
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
 before 055+suse.408.g34171a9-150500.3.47.1
055+suse.408.g34171a9-150500.3.47.1
dracut
Ubuntu:Pro:16.04:LTS
 before 044+3-3ubuntu0.1~esm1, plus listed versions
043-2043-4044+3-1044+3-2044+3-3
044+3-3ubuntu0.1~esm1
dracut
Ubuntu:Pro:18.04:LTS
 before 047-2ubuntu0.1~esm1, plus listed versions
045+132-1047-2
047-2ubuntu0.1~esm1
dracut
Ubuntu:Pro:20.04:LTS
 before 048+80-2ubuntu0.1~esm1, plus listed versions
048+80-2
048+80-2ubuntu0.1~esm1
dracut
Ubuntu:Pro:22.04:LTS
 before 051-1ubuntu0.1~esm1, plus listed versions
051-1
051-1ubuntu0.1~esm1
dracut
Ubuntu:24.04:LTS
 before 060+5-1ubuntu3.4, plus listed versions
059-4ubuntu2060+5-1ubuntu1060+5-1ubuntu2060+5-1ubuntu3060+5-1ubuntu3.1060+5-1ubuntu3.2060+5-1ubuntu3.3
060+5-1ubuntu3.4
dracut
Ubuntu:25.10
 All versions, plus listed versions
106-2ubuntu5107-1ubuntu1107-1ubuntu3107-1ubuntu5108-1ubuntu1108-2ubuntu1108-3ubuntu2108-3ubuntu3
 None known
dracut
Ubuntu:26.04:LTS
 before 110-11ubuntu0.1, plus listed versions
108-3ubuntu3108-8ubuntu1109-5ubuntu1109-7ubuntu1109-9ubuntu1
Show 7 moreShow less
109-11ubuntu1110-1ubuntu2110-3ubuntu1110-5110-7110-10110-11
110-11ubuntu0.1
dracut
openSUSE:Tumbleweed
 before 110+suse.35.g9834432-1.1
110+suse.35.g9834432-1.1
dracut
openSUSE:Leap 16.0
 before 059+suse.722.gdd9d67ff5-160000.1.1
059+suse.722.gdd9d67ff5-160000.1.1
dracut
openSUSE:Leap 16.0
 before 059+suse.730.g73d3411aa-160000.1.1
059+suse.730.g73d3411aa-160000.1.1

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-6893 is a high vulnerability (CVSS 7.5) in Red Hat Enterprise Linux 10, published June 10, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.27%, the 70th percentile. Fixed in dracut 107-7.el10_2.

References

Show 89 moreShow less
This page doesn't list everything

Left out here: 34 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open