{"id":"CVE-2026-15816","aliases":["ALSA-2026:54571","ALSA-2026:54575","ALSA-2026:54576","CLSA-2026-1787152228","CLSA-2026-1787153216","DEBIAN-CVE-2026-15816","EUVD-2026-54451","GHSA-8pxm-cr92-crx8","OESA-2026-3472","OESA-2026-3473","OESA-2026-3474","OESA-2026-3500","OESA-2026-3501","RHSA-2026:54571","RHSA-2026:54575","RHSA-2026:54576","RHSA-2026:57580","RHSA-2026:57772","RHSA-2026:57775","RHSA-2026:57785","RHSA-2026:61252","RHSA-2026:62269","RHSA-2026:69118","RHSA-2026:69119","RHSA-2026:74499","RHSA-2026:79114","RLSA-2026:54571","RLSA-2026:54575","RLSA-2026:54576","SUSE-SU-2026:23195-1","SUSE-SU-2026:23246-1","SUSE-SU-2026:23276-1","SUSE-SU-2026:23314-1","SUSE-SU-2026:3598-1","SUSE-SU-2026:3599-1","SUSE-SU-2026:3611-1","SUSE-SU-2026:3612-1","SUSE-SU-2026:3613-1","UBUNTU-CVE-2026-15816","USN-8758-1","USN-8828-1","openSUSE-SU-2026:11504-1","openSUSE-SU-2026:21639-1"],"status":"published","title":"Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()","description":"A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP server can inject a command-substitution sequence that executes as root the next time dracut sources its emergency hook scripts during standard boot-failure handling.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00371,"percentile":0.31458,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-78"],"published":"2026-08-07T10:33:33Z","modified":"2026-11-02T10:42:37Z","fixes":[{"ecosystem":"AlmaLinux:9","package":"dracut","fixed_in":["057-120.git20260728.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dracut-caps","fixed_in":["057-120.git20260728.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dracut-config-generic","fixed_in":["057-120.git20260728.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dracut-config-rescue","fixed_in":["057-120.git20260728.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dracut-live","fixed_in":["057-120.git20260728.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dracut-network","fixed_in":["057-120.git20260728.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dracut-squash","fixed_in":["057-120.git20260728.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dracut-tools","fixed_in":["057-120.git20260728.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dracut","fixed_in":["049-246.git20260728.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dracut-caps","fixed_in":["049-246.git20260728.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dracut-config-generic","fixed_in":["049-246.git20260728.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dracut-config-rescue","fixed_in":["049-246.git20260728.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dracut-live","fixed_in":["049-246.git20260728.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dracut-network","fixed_in":["049-246.git20260728.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dracut-squash","fixed_in":["049-246.git20260728.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dracut-tools","fixed_in":["049-246.git20260728.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dracut","fixed_in":["107-9.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dracut-caps","fixed_in":["107-9.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dracut-config-generic","fixed_in":["107-9.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dracut-config-rescue","fixed_in":["107-9.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dracut-live","fixed_in":["107-9.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dracut-network","fixed_in":["107-9.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dracut-squash","fixed_in":["107-9.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dracut-tools","fixed_in":["107-9.el10_2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"dracut","fixed_in":["057-89.git20250311.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"dracut-caps","fixed_in":["057-89.git20250311.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"dracut-config-generic","fixed_in":["057-89.git20250311.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"dracut-config-rescue","fixed_in":["057-89.git20250311.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"dracut-live","fixed_in":["057-89.git20250311.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"dracut-network","fixed_in":["057-89.git20250311.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"dracut-squash","fixed_in":["057-89.git20250311.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"dracut-tools","fixed_in":["057-89.git20250311.el9_6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"dracut","fixed_in":["057-21.git20230214.el9_2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"dracut-caps","fixed_in":["057-21.git20230214.el9_2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"dracut-config-generic","fixed_in":["057-21.git20230214.el9_2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"dracut-config-rescue","fixed_in":["057-21.git20230214.el9_2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"dracut-live","fixed_in":["057-21.git20230214.el9_2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"dracut-network","fixed_in":["057-21.git20230214.el9_2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"dracut-squash","fixed_in":["057-21.git20230214.el9_2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"dracut-tools","fixed_in":["057-21.git20230214.el9_2.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"dracut","fixed_in":["112-2"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"dracut","fixed_in":["059-18.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"dracut","fixed_in":["059-18.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP4","package":"dracut","fixed_in":["059-18.oe2403sp4"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"dracut","fixed_in":["050-13.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"dracut","fixed_in":["055-20.oe2203sp4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dracut-caps","fixed_in":["0:057-120.git20260728.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dracut-debuginfo","fixed_in":["0:057-120.git20260728.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dracut-debugsource","fixed_in":["0:057-120.git20260728.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dracut-live","fixed_in":["0:057-120.git20260728.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dracut","fixed_in":["0:057-120.git20260728.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dracut-config-generic","fixed_in":["0:057-120.git20260728.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dracut-config-rescue","fixed_in":["0:057-120.git20260728.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dracut-debuginfo","fixed_in":["0:057-120.git20260728.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dracut-debugsource","fixed_in":["0:057-120.git20260728.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dracut-network","fixed_in":["0:057-120.git20260728.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dracut-squash","fixed_in":["0:057-120.git20260728.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dracut-tools","fixed_in":["0:057-120.git20260728.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dracut","fixed_in":["0:049-246.git20260728.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dracut-caps","fixed_in":["0:049-246.git20260728.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dracut-config-generic","fixed_in":["0:049-246.git20260728.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dracut-config-rescue","fixed_in":["0:049-246.git20260728.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dracut-debuginfo","fixed_in":["0:049-246.git20260728.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dracut-debugsource","fixed_in":["0:049-246.git20260728.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dracut-live","fixed_in":["0:049-246.git20260728.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dracut-network","fixed_in":["0:049-246.git20260728.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dracut-squash","fixed_in":["0:049-246.git20260728.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dracut-tools","fixed_in":["0:049-246.git20260728.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-caps","fixed_in":["0:107-9.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-debuginfo","fixed_in":["0:107-9.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-debugsource","fixed_in":["0:107-9.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-live","fixed_in":["0:107-9.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut","fixed_in":["0:107-9.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-config-generic","fixed_in":["0:107-9.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-config-rescue","fixed_in":["0:107-9.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-network","fixed_in":["0:107-9.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-squash","fixed_in":["0:107-9.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-tools","fixed_in":["0:107-9.el10_2"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"dracut","fixed_in":["0:057-120.git20260728.el9_8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"dracut","fixed_in":["0:049-246.git20260728.el8_10"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"dracut","fixed_in":["0:107-9.el10_2"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"dracut","fixed_in":["059+suse.645.g79fd74d-slfo.1.1_1.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"dracut","fixed_in":["059+suse.611.g7d90691-1.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.2","package":"dracut","fixed_in":["059+suse.726.gde083b3a1-160000.1.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"dracut","fixed_in":["059+suse.726.gde083b3a1-160000.1.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"dracut","fixed_in":["059+suse.726.gde083b3a1-160000.1.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"dracut","fixed_in":["044.2-130.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"dracut","fixed_in":["044.2-130.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"dracut","fixed_in":["055+suse.367.g85633e8-150400.3.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"dracut","fixed_in":["055+suse.367.g85633e8-150400.3.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"dracut","fixed_in":["055+suse.367.g85633e8-150400.3.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"dracut","fixed_in":["055+suse.367.g85633e8-150400.3.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"dracut","fixed_in":["055+suse.367.g85633e8-150400.3.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"dracut","fixed_in":["055+suse.367.g85633e8-150400.3.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"dracut","fixed_in":["055+suse.404.gc96044c-150500.3.44.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"dracut","fixed_in":["055+suse.404.gc96044c-150500.3.44.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"dracut","fixed_in":["055+suse.404.gc96044c-150500.3.44.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"dracut","fixed_in":["055+suse.404.gc96044c-150500.3.44.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"dracut","fixed_in":["055+suse.404.gc96044c-150500.3.44.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP6","package":"dracut","fixed_in":["059+suse.567.gf5cfeb7f7-150600.3.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"dracut","fixed_in":["059+suse.567.gf5cfeb7f7-150600.3.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"dracut","fixed_in":["059+suse.567.gf5cfeb7f7-150600.3.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"dracut","fixed_in":["059+suse.572.g753fdae1b-150700.3.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP7","package":"dracut","fixed_in":["059+suse.572.g753fdae1b-150700.3.20.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"dracut","fixed_in":["044+3-3ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"dracut","fixed_in":["047-2ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"dracut","fixed_in":["048+80-2ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"dracut","fixed_in":["051-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"dracut","fixed_in":["060+5-1ubuntu3.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"dracut","fixed_in":["110-11ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"dracut","fixed_in":["112+suse.29.gc0c5e1d-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"dracut","fixed_in":["059+suse.726.gde083b3a1-160000.1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-120.git20260728.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dracut-caps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-120.git20260728.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dracut-config-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-120.git20260728.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dracut-config-rescue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-120.git20260728.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dracut-live","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-120.git20260728.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-120.git20260728.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dracut-squash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-120.git20260728.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dracut-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-120.git20260728.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"049-246.git20260728.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dracut-caps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"049-246.git20260728.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dracut-config-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"049-246.git20260728.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dracut-config-rescue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"049-246.git20260728.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dracut-live","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"049-246.git20260728.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"049-246.git20260728.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dracut-squash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"049-246.git20260728.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dracut-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"049-246.git20260728.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"107-9.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dracut-caps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"107-9.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dracut-config-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"107-9.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dracut-config-rescue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"107-9.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dracut-live","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"107-9.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"107-9.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dracut-squash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"107-9.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dracut-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"107-9.el10_2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-89.git20250311.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"dracut-caps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-89.git20250311.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"dracut-config-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-89.git20250311.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"dracut-config-rescue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-89.git20250311.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"dracut-live","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-89.git20250311.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-89.git20250311.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"dracut-squash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-89.git20250311.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"dracut-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-89.git20250311.el9_6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-21.git20230214.el9_2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"dracut-caps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-21.git20230214.el9_2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"dracut-config-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-21.git20230214.el9_2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"dracut-config-rescue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-21.git20230214.el9_2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"dracut-live","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-21.git20230214.el9_2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-21.git20230214.el9_2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"dracut-squash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-21.git20230214.el9_2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"dracut-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-21.git20230214.el9_2.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["059+212-1","059+212-2","059+212-3","059+212-4","059-4","060+5-1","060+5-2~exp1","060+5-7","060+5-8","102-1","102-2","102-3","103-1","103-1.1","103-2","105-1","105-2","105-2~exp1","105-2~exp2","105-2~exp3","105-2~exp4","105-2~exp5","105-2~exp6","105-2~exp7","105-2~exp8","105-3","106-1","106-2","106-3","106-4","106-5","106-5~bpo12+1","106-6","107-1","107-2","108-1","108-2","108-3","108-4","108-5","108-6","108-7","108-8","109-1","109-10","109-11","109-1exp1","109-2","109-3","109-4","109-5","109-6","109-6exp1","109-6exp2","109-6exp3","109-7","109-8","109-9","110-1","110-10","110-11","110-12","110-2","110-3","110-4","110-5","110-6","110-7","110-8","110-9","111-1","111-2","111-3","111-4","111-5","111-6","112-1","112-2","112-3","112-4","112-5","112-6","112-7"]},{"source":"osv","ecosystem":"Debian:13","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["106-6","107-1","107-2","108-1","108-2","108-3","108-4","108-5","108-6","108-7","108-8","109-1","109-10","109-11","109-1exp1","109-2","109-3","109-4","109-5","109-6","109-6exp1","109-6exp2","109-6exp3","109-7","109-8","109-9","110-1","110-10","110-11","110-12","110-2","110-3","110-4","110-5","110-6","110-7","110-8","110-9","111-1","111-2","111-3","111-4","111-5","111-6","112-1","112-2","112-3","112-4","112-5","112-6","112-7"]},{"source":"osv","ecosystem":"Debian:14","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"112-2"}]}],"versions":["106-6","107-1","107-2","108-1","108-2","108-3","108-4","108-5","108-6","108-7","108-8","109-1","109-10","109-11","109-1exp1","109-2","109-3","109-4","109-5","109-6","109-6exp1","109-6exp2","109-6exp3","109-7","109-8","109-9","110-1","110-10","110-11","110-12","110-2","110-3","110-4","110-5","110-6","110-7","110-8","110-9","111-1","111-2","111-3","111-4","111-5","111-6","112-1"]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059-18.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059-18.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059-18.oe2403sp4"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"050-13.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055-20.oe2203sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dracut-caps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-120.git20260728.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dracut-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-120.git20260728.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dracut-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-120.git20260728.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dracut-live","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-120.git20260728.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-120.git20260728.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dracut-config-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-120.git20260728.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dracut-config-rescue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-120.git20260728.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dracut-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-120.git20260728.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dracut-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-120.git20260728.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-120.git20260728.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dracut-squash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-120.git20260728.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dracut-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-120.git20260728.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-246.git20260728.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dracut-caps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-246.git20260728.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dracut-config-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-246.git20260728.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dracut-config-rescue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-246.git20260728.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dracut-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-246.git20260728.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dracut-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-246.git20260728.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dracut-live","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-246.git20260728.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-246.git20260728.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dracut-squash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-246.git20260728.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dracut-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-246.git20260728.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-caps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:107-9.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:107-9.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:107-9.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-live","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:107-9.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:107-9.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-config-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:107-9.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-config-rescue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:107-9.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:107-9.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-squash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:107-9.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:107-9.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:105-4.el10_0.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:105-4.el10_0.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-89.git20250311.el9_6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-89.git20250311.el9_6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-25.git20250717.el9_2.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-25.git20250717.el9_2.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-54.git20250423.el9_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-54.git20250423.el9_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-223.git20230119.el8_8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-223.git20230119.el8_8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-223.git20230119.el8_8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-223.git20230119.el8_8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:033-577.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:033-577.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"dracut-caps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"dracut-config-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"dracut-config-rescue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"dracut-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"dracut-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"dracut-live","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"dracut-squash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"dracut-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"dracut-caps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"dracut-config-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"dracut-config-rescue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"dracut-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"dracut-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"dracut-live","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"dracut-squash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"dracut-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"dracut-caps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"dracut-config-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"dracut-config-rescue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"dracut-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"dracut-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"dracut-live","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"dracut-squash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"dracut-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"dracut-caps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"dracut-config-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"dracut-config-rescue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"dracut-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"dracut-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"dracut-live","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"dracut-squash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"dracut-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:004-413.el6_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"dracut-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:004-413.el6_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"dracut-kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:004-413.el6_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:004-413.el6_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"dracut-caps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:004-413.el6_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"dracut-fips-aesni","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:004-413.el6_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"dracut-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:004-413.el6_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"dracut-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:004-413.el6_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:004-414.el6_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:004-414.el6_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-120.git20260728.el9_8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-246.git20260728.el8_10"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:107-9.el10_2"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.645.g79fd74d-slfo.1.1_1.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.611.g7d90691-1.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.726.gde083b3a1-160000.1.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.726.gde083b3a1-160000.1.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.726.gde083b3a1-160000.1.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"044.2-130.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"044.2-130.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.367.g85633e8-150400.3.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.367.g85633e8-150400.3.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.367.g85633e8-150400.3.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.367.g85633e8-150400.3.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.367.g85633e8-150400.3.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.367.g85633e8-150400.3.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.404.gc96044c-150500.3.44.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.404.gc96044c-150500.3.44.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.404.gc96044c-150500.3.44.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.404.gc96044c-150500.3.44.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.404.gc96044c-150500.3.44.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP6","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.567.gf5cfeb7f7-150600.3.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.567.gf5cfeb7f7-150600.3.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.567.gf5cfeb7f7-150600.3.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.572.g753fdae1b-150700.3.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP7","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.572.g753fdae1b-150700.3.20.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"044+3-3ubuntu0.1~esm1"}]}],"versions":["043-2","043-4","044+3-1","044+3-2","044+3-3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"047-2ubuntu0.1~esm1"}]}],"versions":["045+132-1","047-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"048+80-2ubuntu0.1~esm1"}]}],"versions":["048+80-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"051-1ubuntu0.1~esm1"}]}],"versions":["051-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"060+5-1ubuntu3.4"}]}],"versions":["059-4ubuntu2","060+5-1ubuntu1","060+5-1ubuntu2","060+5-1ubuntu3","060+5-1ubuntu3.1","060+5-1ubuntu3.2","060+5-1ubuntu3.3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"110-11ubuntu0.1"}]}],"versions":["108-3ubuntu3","108-8ubuntu1","109-5ubuntu1","109-7ubuntu1","109-9ubuntu1","109-11ubuntu1","110-1ubuntu2","110-3ubuntu1","110-5","110-7","110-10","110-11"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"110-11ubuntu0.1"}]}],"versions":["108-3ubuntu3","108-8ubuntu1","109-5ubuntu1","109-7ubuntu1","109-9ubuntu1","109-11ubuntu1","110-1ubuntu2","110-3ubuntu1","110-5","110-7","110-10","110-11"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"044+3-3ubuntu0.1~esm1"}]}],"versions":["043-2","043-4","044+3-1","044+3-2","044+3-3"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"047-2ubuntu0.1~esm1"}]}],"versions":["045+132-1","047-2"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"048+80-2ubuntu0.1~esm1"}]}],"versions":["048+80-2"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"051-1ubuntu0.1~esm1"}]}],"versions":["051-1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"060+5-1ubuntu3.4"}]}],"versions":["059-4ubuntu2","060+5-1ubuntu1","060+5-1ubuntu2","060+5-1ubuntu3","060+5-1ubuntu3.1","060+5-1ubuntu3.2","060+5-1ubuntu3.3"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"110-11ubuntu0.1"}]}],"versions":["108-3ubuntu3","108-8ubuntu1","109-5ubuntu1","109-7ubuntu1","109-9ubuntu1","109-11ubuntu1","110-1ubuntu2","110-3ubuntu1","110-5","110-7","110-10","110-11"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"112+suse.29.gc0c5e1d-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.726.gde083b3a1-160000.1.1"}]}]}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 10.0 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 6 extended lifecycle support  - extension"},{"vendor":"red hat","product":"red hat enterprise linux 7 extended lifecycle support"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 extended update support long-life add-on"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 extended update support long-life add-on"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.4 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.6 extended update support"},{"vendor":"red hat","product":"red hat hardened images"},{"vendor":"red hat","product":"red hat openshift container platform 4.12"},{"vendor":"red hat","product":"red hat openshift container platform 4.13"},{"vendor":"red hat","product":"red hat openshift container platform 4.14"},{"vendor":"red hat","product":"red hat openshift container platform 4.15"},{"vendor":"red hat","product":"red hat openshift container platform 4.16"},{"vendor":"red hat","product":"red hat openshift container platform 4.17"},{"vendor":"red hat","product":"red hat openshift container platform 4.18"},{"vendor":"red hat","product":"red hat openshift container platform 4.19"},{"vendor":"red hat","product":"red hat openshift container platform 4.20"},{"vendor":"red hat","product":"red hat openshift container platform 4.21"},{"vendor":"red hat","product":"red hat openshift container platform 4.22"},{"vendor":"red hat","product":"red hat openshift container platform 5"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:54571","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:54575","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:54576","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:57580","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:57772","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:57775","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:57785","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:60440","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:60445","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:61252","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:62269","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:62409","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:62549","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:63041","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:63044","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:65839","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:65851","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:66357","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:67857","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:69118","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:69119","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:70586","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:70615","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:74499","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:79114","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:90272","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15816","tags":["vdb-entry","x_refsource_REDHAT","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2459963","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2500889","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://github.com/dracutdevs/dracut/blob/master/modules.d/40network/netroot.sh","tags":["article","report"]},{"url":"https://github.com/dracutdevs/dracut/blob/master/modules.d/99base/dracut-lib.sh","tags":["article","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15816","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-8pxm-cr92-crx8"},{"url":"https://bugzilla.redhat.com/2500889","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-54571.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-54575.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-54576.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1787152228.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1787153216.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-15816","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3472","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3473","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3474","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3500","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3501","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54571.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15816","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54575.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54576.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_57580.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6893","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6893","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6893","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_57772.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_57775.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_57785.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503147","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_61252.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16445","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16445","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16445","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26534","tags":["article"]},{"url":"https://github.com/dracutdevs/dracut/commit/e509c638e6","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_62269.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69118.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69119.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74499.json","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/RHEL-276289","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_79114.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:54571","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:54575","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:54576","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623195-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1274432","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-15816","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623246-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623276-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623314-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263598-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263599-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263611-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263612-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263613-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-15816","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8758-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-8828-1","tags":["advisory"]},{"url":"https://bugs.launchpad.net/bugs/2166887","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-8637","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-6893","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-16445","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-15816","title":"Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()","description":"A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP server can inject a command-substitution sequence that executes as root the next time dracut sources its emergency hook scripts during standard boot-failure handling.","status":"published","published":"2026-08-07T10:33:33.612Z","modified":"2026-11-02T10:42:37.456Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T18:00:08.034842Z"}],"euvd":[{"id":"EUVD-2026-54451","description":"A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP server can inject a command-substitution sequence that executes as root the next time dracut sources its emergency hook scripts during standard boot-failure handling.","status":"published","published":"2026-08-07T10:33:33Z","modified":"2026-11-02T10:42:37Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:58:45.728338Z"}],"ghsa":[{"id":"GHSA-8pxm-cr92-crx8","title":"A flaw was found in dracut. The die() error-handling function writes its message into a shell...","description":"A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP server can inject a command-substitution sequence that executes as root the next time dracut sources its emergency hook scripts during standard boot-failure handling.","status":"published","published":"2026-08-07T12:32:01Z","modified":"2026-10-28T00:31:29Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T15:14:32.579072Z"}],"nvd":[{"id":"CVE-2026-15816","description":"A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP server can inject a command-substitution sequence that executes as root the next time dracut sources its emergency hook scripts during standard boot-failure handling.","status":"published","published":"2026-08-07T11:17:05.1Z","modified":"2026-10-30T18:17:28.643Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:12:35.386166Z"}],"osv":[{"id":"DEBIAN-CVE-2026-15816","description":"A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP server can inject a command-substitution sequence that executes as root the next time dracut sources its emergency hook scripts during standard boot-failure handling.","status":"published","published":"2026-08-07T11:17:05.1Z","modified":"2026-10-31T09:47:26.34705645Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:52.562592Z"},{"id":"OESA-2026-3472","title":"dracut security update","description":"dracut contains tools to create bootable initramfses for the Linux kernel. Unlike previous implementations, dracut hard-codes as little as possible into the initramfs. dracut contains various modules which are driven by the event-based udev. Having root on MD, DM, LVM2, LUKS is supported as well as NFS, iSCSI, NBD, FCoE with the dracut-network package.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP server can inject a command-substitution sequence that executes as root the next time dracut sources its emergency hook scripts during standard boot-failure handling.(CVE-2026-15816)","status":"published","published":"2026-08-20T10:00:46Z","modified":"2026-08-20T10:15:14.017114066Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3473","title":"dracut security update","description":"dracut contains tools to create bootable initramfses for the Linux kernel. Unlike previous implementations, dracut hard-codes as little as possible into the initramfs. dracut contains various modules which are driven by the event-based udev. Having root on MD, DM, LVM2, LUKS is supported as well as NFS, iSCSI, NBD, FCoE with the dracut-network package.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP server can inject a command-substitution sequence that executes as root the next time dracut sources its emergency hook scripts during standard boot-failure handling.(CVE-2026-15816)","status":"published","published":"2026-08-20T10:00:49Z","modified":"2026-08-20T10:15:14.173275872Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3474","title":"dracut security update","description":"dracut contains tools to create bootable initramfses for the Linux kernel. Unlike previous implementations, dracut hard-codes as little as possible into the initramfs. dracut contains various modules which are driven by the event-based udev. Having root on MD, DM, LVM2, LUKS is supported as well as NFS, iSCSI, NBD, FCoE with the dracut-network package.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP server can inject a command-substitution sequence that executes as root the next time dracut sources its emergency hook scripts during standard boot-failure handling.(CVE-2026-15816)","status":"published","published":"2026-08-20T10:00:51Z","modified":"2026-08-20T10:15:14.223370309Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3500","title":"dracut security update","description":"dracut contains tools to create bootable initramfses for the Linux kernel. Unlike previous implementations, dracut hard-codes as little as possible into the initramfs. dracut contains various modules which are driven by the event-based udev. Having root on MD, DM, LVM2, LUKS is supported as well as NFS, iSCSI, NBD, FCoE with the dracut-network package.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP server can inject a command-substitution sequence that executes as root the next time dracut sources its emergency hook scripts during standard boot-failure handling.(CVE-2026-15816)","status":"published","published":"2026-08-30T04:14:13Z","modified":"2026-08-30T04:31:30.910039541Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"OESA-2026-3501","title":"dracut security update","description":"dracut contains tools to create bootable initramfses for the Linux kernel. Unlike previous implementations, dracut hard-codes as little as possible into the initramfs. dracut contains various modules which are driven by the event-based udev. Having root on MD, DM, LVM2, LUKS is supported as well as NFS, iSCSI, NBD, FCoE with the dracut-network package.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP server can inject a command-substitution sequence that executes as root the next time dracut sources its emergency hook scripts during standard boot-failure handling.(CVE-2026-15816)","status":"published","published":"2026-08-30T04:14:14Z","modified":"2026-08-30T04:31:36.98448825Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.217107Z"},{"id":"RHSA-2026:54571","title":"Red Hat Security Advisory: dracut security update","status":"published","published":"2026-08-14T10:16:54Z","modified":"2026-10-15T10:21:19Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:54575","title":"Red Hat Security Advisory: dracut security update","status":"published","published":"2026-08-14T10:16:55Z","modified":"2026-10-15T10:21:19Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:54576","title":"Red Hat Security Advisory: dracut security update","status":"published","published":"2026-08-14T10:16:56Z","modified":"2026-10-15T10:21:20Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:57580","title":"Red Hat Security Advisory: dracut security update","status":"published","published":"2026-08-21T10:14:02Z","modified":"2026-10-15T10:21:49Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:57772","title":"Red Hat Security Advisory: dracut security update","status":"published","published":"2026-08-21T10:14:09Z","modified":"2026-10-15T10:21:54Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:57775","title":"Red Hat Security Advisory: dracut security update","status":"published","published":"2026-08-21T10:14:09Z","modified":"2026-10-15T10:21:54Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:57785","title":"Red Hat Security Advisory: dracut security update","status":"published","published":"2026-08-21T10:14:10Z","modified":"2026-10-15T10:21:55Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:61252","title":"Red Hat Security Advisory: dracut security update","status":"published","published":"2026-08-31T10:12:10Z","modified":"2026-10-15T10:22:56Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:62269","title":"Red Hat Security Advisory: dracut security update","status":"published","published":"2026-09-02T10:22:26Z","modified":"2026-10-15T10:23:09Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:69118","title":"Red Hat Security Advisory: dracut security update","status":"published","published":"2026-09-21T10:14:52Z","modified":"2026-10-15T10:24:56Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:69119","title":"Red Hat Security Advisory: dracut security update","status":"published","published":"2026-09-21T10:14:53Z","modified":"2026-10-15T10:24:56Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:74499","title":"Red Hat Security Advisory: dracut security update","status":"published","published":"2026-10-02T10:25:56Z","modified":"2026-10-15T10:26:46Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:79114","title":"Red Hat Security Advisory: dracut security, bug fix, and enhancement update","status":"published","published":"2026-10-10T10:22:41Z","modified":"2026-10-15T10:27:48Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RLSA-2026:54571","title":"Important: dracut security update","description":"The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition.\n\nSecurity Fix(es):\n\n* dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die() (CVE-2026-15816)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-14T12:03:50.499163Z","modified":"2026-08-14T12:30:04.723288791Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:54575","title":"Important: dracut security update","description":"The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition.\n\nSecurity Fix(es):\n\n* dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die() (CVE-2026-15816)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-15T06:00:52.662894Z","modified":"2026-08-15T06:30:25.268442006Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"RLSA-2026:54576","title":"Important: dracut security update","description":"The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition.\n\nSecurity Fix(es):\n\n* dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die() (CVE-2026-15816)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-08-14T12:06:50.87278Z","modified":"2026-08-14T12:30:04.697978999Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.111232Z"},{"id":"UBUNTU-CVE-2026-15816","description":"A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP server can inject a command-substitution sequence that executes as root the next time dracut sources its emergency hook scripts during standard boot-failure handling.","status":"published","published":"2026-08-07T11:17:00Z","modified":"2026-09-28T22:56:46.599814775Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:00.592716Z"},{"id":"ALSA-2026:54571","title":"Important: dracut security update","description":"The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition.  \n\nSecurity Fix(es):  \n\n  * dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die() (CVE-2026-15816)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-08-13T00:00:00Z","modified":"2026-10-29T11:30:11.145229372Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:54575","title":"Important: dracut security update","description":"The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition.  \n\nSecurity Fix(es):  \n\n  * dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die() (CVE-2026-15816)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-08-13T00:00:00Z","modified":"2026-10-29T11:02:28.914506814Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"ALSA-2026:54576","title":"Important: dracut security update","description":"The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition.  \n\nSecurity Fix(es):  \n\n  * dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die() (CVE-2026-15816)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-08-13T00:00:00Z","modified":"2026-10-29T11:30:37.562224098Z","updated_at":"2026-11-02T15:27:54.753319Z"},{"id":"CLSA-2026-1787152228","title":"dracut: Fix of CVE-2026-15816","description":"- CVE-2026-15816: escape DHCP-controlled data reaching die() and export_n","status":"published","published":"2026-08-19T15:10:38Z","modified":"2026-10-26T09:31:25.198466253Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"CLSA-2026-1787153216","title":"dracut: Fix of CVE-2026-15816","description":"- CVE-2026-15816: escape DHCP-controlled data reaching die() and export_n","status":"published","published":"2026-08-19T15:27:07Z","modified":"2026-10-26T09:30:32.334531573Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"openSUSE-SU-2026:11504-1","title":"dracut-112+suse.29.gc0c5e1d-1.1 on GA media","description":"These are all security issues fixed in the dracut-112+suse.29.gc0c5e1d-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-08-13T00:00:00Z","modified":"2026-08-14T10:30:29.626423552Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"openSUSE-SU-2026:21639-1","title":"Security update for dracut","description":"This update for dracut fixes the following issue:\n\nUpdate to version 059+suse.726.gde083b3a1.\n\nSecuritys issue fixed:\n\n- CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in `die()`\n  (bsc#1274432).\n\nOther updates and bugfixes:\n\n- Fix(base): sanitize message written by `die()` to the emergency hook.\n- Feat(base): add escape function implementing `printf %q`.\n","status":"published","published":"2026-08-24T20:17:31Z","modified":"2026-08-27T18:23:12.786308584Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2026:23195-1","title":"Security update for dracut","description":"This update for dracut fixes the following issue:\n\nUpdate to version 059+suse.645.g79fd74d.\n\nSecuritys issue fixed:\n\n- CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in `die()`\n  (bsc#1274432).\n\nOther updates and bugfixes:\n\n- Fix(base): sanitize message written by `die()` to the emergency hook.\n- Feat(base): add escape function implementing `printf %q`.\n","status":"published","published":"2026-08-19T11:14:59Z","modified":"2026-08-24T18:23:33.972323343Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:23246-1","title":"Security update for dracut","description":"This update for dracut fixes the following issue:\n\nUpdate to version 059+suse.611.g7d90691.\n\nSecuritys issue fixed:\n\n- CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in `die()`\n  (bsc#1274432).\n\nOther updates and bugfixes:\n\n- Fix(base): sanitize message written by `die()` to the emergency hook.\n- Feat(base): add escape function implementing `printf %q`.\n","status":"published","published":"2026-08-19T10:54:57Z","modified":"2026-08-27T18:23:11.322378494Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:23276-1","title":"Security update for dracut","description":"This update for dracut fixes the following issue:\n\nUpdate to version 059+suse.726.gde083b3a1.\n\nSecuritys issue fixed:\n\n- CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in `die()`\n  (bsc#1274432).\n\nOther updates and bugfixes:\n\n- Fix(base): sanitize message written by `die()` to the emergency hook.\n- Feat(base): add escape function implementing `printf %q`.\n","status":"published","published":"2026-08-24T20:19:22Z","modified":"2026-08-31T18:23:10.021559748Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:23314-1","title":"Security update for dracut","description":"This update for dracut fixes the following issue:\n\nUpdate to version 059+suse.726.gde083b3a1.\n\nSecuritys issue fixed:\n\n- CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in `die()`\n  (bsc#1274432).\n\nOther updates and bugfixes:\n\n- Fix(base): sanitize message written by `die()` to the emergency hook.\n- Feat(base): add escape function implementing `printf %q`.\n","status":"published","published":"2026-08-24T20:19:22Z","modified":"2026-09-10T18:23:09.669074531Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:3598-1","title":"Security update for dracut","description":"This update for dracut fixes the following issue:\n\n- CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in `die()`\n  (bsc#1274432).\n","status":"published","published":"2026-08-12T11:52:30Z","modified":"2026-08-13T09:30:13.063492598Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"SUSE-SU-2026:3599-1","title":"Security update for dracut","description":"This update for dracut fixes the following issue:\n\nUpdate to version 055+suse.367.g85633e8.\n\nSecuritys issue fixed:\n\n- CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in `die()`\n  (bsc#1274432).\n\nOther updates and bugfixes:\n\n- Fix(base): sanitize message written by `die()` to the emergency hook.\n- Feat(base): add escape function implementing `printf %q`.\n","status":"published","published":"2026-08-12T11:53:32Z","modified":"2026-08-13T09:30:12.652624549Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"SUSE-SU-2026:3611-1","title":"Security update for dracut","description":"This update for dracut fixes the following issue:\n\nUpdate to version 055+suse.404.gc96044c.\n\nSecuritys issue fixed:\n\n- CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in `die()`\n  (bsc#1274432).\n\nOther updates and bugfixes:\n\n- Fix(base): sanitize message written by `die()` to the emergency hook.\n- Feat(base): add escape function implementing `printf %q`.\n","status":"published","published":"2026-08-13T17:58:45Z","modified":"2026-08-14T18:15:07.251794024Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"SUSE-SU-2026:3612-1","title":"Security update for dracut","description":"This update for dracut fixes the following issue:\n\nUpdate to version 059+suse.567.gf5cfeb7f7.\n\nSecuritys issue fixed:\n\n- CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in `die()`\n  (bsc#1274432).\n\nOther updates and bugfixes:\n\n- Fix(base): sanitize message written by `die()` to the emergency hook.\n- Feat(base): add escape function implementing `printf %q`.\n","status":"published","published":"2026-08-13T17:59:06Z","modified":"2026-08-14T18:15:07.205002165Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"SUSE-SU-2026:3613-1","title":"Security update for dracut","description":"This update for dracut fixes the following issue:\n\nUpdate to version 059+suse.572.g753fdae1b.\n\nSecuritys issue fixed:\n\n- CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in `die()`\n  (bsc#1274432).\n\nOther updates and bugfixes:\n\n- Fix(base): sanitize message written by `die()` to the emergency hook.\n- Feat(base): add escape function implementing `printf %q`.\n","status":"published","published":"2026-08-13T17:59:30Z","modified":"2026-08-14T18:15:07.659707528Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"USN-8758-1","title":"dracut vulnerability","description":"It was discovered that dracut did not properly shell-quote messages\nwritten by the die() function to the emergency hook directory. An\nattacker on the adjacent network controlling a rogue DHCP server could\nuse this issue to inject commands that execute as root during\nboot-failure handling. (CVE-2026-15816)","status":"published","published":"2026-09-14T20:28:17Z","modified":"2026-09-15T03:27:15.146635962Z","updated_at":"2026-11-02T16:58:26.907654Z"},{"id":"USN-8828-1","title":"dracut vulnerabilities","description":"It was discovered that dracut created initramfs images with overly\npermissive permissions under certain circumstances. A local attacker could\npossibly use this issue to obtain sensitive information. This issue only\naffected Ubuntu 16.04 LTS. (CVE-2016-8637)\n\nIt was discovered that dracut did not properly sanitize DHCP options\nbefore writing them to shell scripts under certain circumstances. A remote\nattacker controlling a DHCP server on the local network could possibly use\nthis issue to execute arbitrary code as root during system boot. This issue\nonly affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS,\nUbuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2026-6893)\n\nIt was discovered that dracut did not properly quote error messages written\nto shell scripts under certain circumstances. A remote attacker controlling\na DHCP server on the local network could possibly use this issue to execute\narbitrary code as root during system boot. This issue only affected Ubuntu\n16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu\n24.04 LTS. (CVE-2026-15816)\n\nIt was discovered that dracut did not properly sanitize network\nconfiguration data before writing it to a temporary shell script under\ncertain circumstances. A remote attacker controlling DHCP on the local\nnetwork could possibly use this issue to execute arbitrary code as root\nduring system boot. This issue only affected Ubuntu 22.04 LTS.\n(CVE-2026-16445)","status":"published","published":"2026-09-28T13:33:37Z","modified":"2026-09-28T22:57:43.497701288Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}