{"id":"CVE-2026-6893","aliases":["ALSA-2026:26532","ALSA-2026:26533","ALSA-2026:26534","AZL-90111","BELL-CVE-2026-6893","CLSA-2026-1782829348","CLSA-2026-1783076363","CLSA-2026-1787307553","DEBIAN-CVE-2026-6893","EUVD-2026-36110","GHSA-m789-mmmh-7vqc","OESA-2026-3136","RHSA-2026:26532","RHSA-2026:26533","RHSA-2026:26534","RHSA-2026:26713","RHSA-2026:57580","RHSA-2026:57772","RHSA-2026:57775","RHSA-2026:57785","RHSA-2026:61252","RHSA-2026:62269","RHSA-2026:69118","RHSA-2026:69119","RHSA-2026:74499","RHSA-2026:79114","RLSA-2026:26532","RLSA-2026:26533","RLSA-2026:26534","SUSE-SU-2026:22273-1","SUSE-SU-2026:22358-1","SUSE-SU-2026:22431-1","SUSE-SU-2026:22446-1","SUSE-SU-2026:23444-1","SUSE-SU-2026:23466-1","SUSE-SU-2026:23513-1","SUSE-SU-2026:23614-1","SUSE-SU-2026:2720-1","SUSE-SU-2026:2721-1","SUSE-SU-2026:2803-1","SUSE-SU-2026:2851-1","SUSE-SU-2026:3931-1","SUSE-SU-2026:3997-1","SUSE-SU-2026:4078-1","SUSE-SU-2026:4079-1","UBUNTU-CVE-2026-6893","USN-8828-1","openSUSE-SU-2026:11076-1","openSUSE-SU-2026:21054-1","openSUSE-SU-2026:21749-1"],"status":"published","title":"Dracut: dracut: root code execution via dhcp options command injection","description":"A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.01275,"percentile":0.70302,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-78"],"published":"2026-06-10T19:49:27Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"AlmaLinux:10","package":"dracut","fixed_in":["107-7.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dracut-caps","fixed_in":["107-7.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dracut-config-generic","fixed_in":["107-7.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dracut-config-rescue","fixed_in":["107-7.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dracut-live","fixed_in":["107-7.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dracut-network","fixed_in":["107-7.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dracut-squash","fixed_in":["107-7.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"dracut-tools","fixed_in":["107-7.el10_2"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dracut","fixed_in":["057-115.git20260527.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dracut-caps","fixed_in":["057-115.git20260527.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dracut-config-generic","fixed_in":["057-115.git20260527.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dracut-config-rescue","fixed_in":["057-115.git20260527.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dracut-live","fixed_in":["057-115.git20260527.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dracut-network","fixed_in":["057-115.git20260527.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dracut-squash","fixed_in":["057-115.git20260527.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"dracut-tools","fixed_in":["057-115.git20260527.el9_8"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dracut","fixed_in":["049-244.git20260529.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dracut-caps","fixed_in":["049-244.git20260529.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dracut-config-generic","fixed_in":["049-244.git20260529.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dracut-config-rescue","fixed_in":["049-244.git20260529.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dracut-live","fixed_in":["049-244.git20260529.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dracut-network","fixed_in":["049-244.git20260529.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dracut-squash","fixed_in":["049-244.git20260529.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"dracut-tools","fixed_in":["049-244.git20260529.el8_10"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"dracut","fixed_in":["057-89.git20250311.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"dracut-caps","fixed_in":["057-89.git20250311.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"dracut-config-generic","fixed_in":["057-89.git20250311.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"dracut-config-rescue","fixed_in":["057-89.git20250311.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"dracut-live","fixed_in":["057-89.git20250311.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"dracut-network","fixed_in":["057-89.git20250311.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"dracut-squash","fixed_in":["057-89.git20250311.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"dracut-tools","fixed_in":["057-89.git20250311.el9_6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"dracut","fixed_in":["057-21.git20230214.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"dracut-caps","fixed_in":["057-21.git20230214.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"dracut-config-generic","fixed_in":["057-21.git20230214.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"dracut-config-rescue","fixed_in":["057-21.git20230214.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"dracut-live","fixed_in":["057-21.git20230214.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"dracut-network","fixed_in":["057-21.git20230214.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"dracut-squash","fixed_in":["057-21.git20230214.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"dracut-tools","fixed_in":["057-21.git20230214.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"dracut","fixed_in":["033-572.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"dracut-caps","fixed_in":["033-572.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"dracut-config-generic","fixed_in":["033-572.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"dracut-config-rescue","fixed_in":["033-572.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"dracut-fips","fixed_in":["033-572.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"dracut-fips-aesni","fixed_in":["033-572.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"dracut-network","fixed_in":["033-572.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:7","package":"dracut-tools","fixed_in":["033-572.el7.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"dracut","fixed_in":["112-1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP4","package":"dracut","fixed_in":["059-17.oe2403sp4"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"dracut","fixed_in":["050-11.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"dracut","fixed_in":["055-18.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"dracut","fixed_in":["059-17.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"dracut","fixed_in":["059-17.oe2403sp3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-caps","fixed_in":["0:107-7.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-debuginfo","fixed_in":["0:107-7.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-debugsource","fixed_in":["0:107-7.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-live","fixed_in":["0:107-7.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut","fixed_in":["0:107-7.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-config-generic","fixed_in":["0:107-7.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-config-rescue","fixed_in":["0:107-7.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-network","fixed_in":["0:107-7.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-squash","fixed_in":["0:107-7.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-tools","fixed_in":["0:107-7.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dracut-caps","fixed_in":["0:057-115.git20260527.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dracut-debuginfo","fixed_in":["0:057-115.git20260527.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dracut-debugsource","fixed_in":["0:057-115.git20260527.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dracut-live","fixed_in":["0:057-115.git20260527.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dracut","fixed_in":["0:057-115.git20260527.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dracut-config-generic","fixed_in":["0:057-115.git20260527.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dracut-config-rescue","fixed_in":["0:057-115.git20260527.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dracut-debuginfo","fixed_in":["0:057-115.git20260527.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dracut-debugsource","fixed_in":["0:057-115.git20260527.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dracut-network","fixed_in":["0:057-115.git20260527.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dracut-squash","fixed_in":["0:057-115.git20260527.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dracut-tools","fixed_in":["0:057-115.git20260527.el9_8"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"dracut","fixed_in":["0:109-6.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"dracut-caps","fixed_in":["0:109-6.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"dracut-config-generic","fixed_in":["0:109-6.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"dracut-config-rescue","fixed_in":["0:109-6.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"dracut-live","fixed_in":["0:109-6.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"dracut-network","fixed_in":["0:109-6.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"dracut-squash","fixed_in":["0:109-6.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"dracut-tools","fixed_in":["0:109-6.hum1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"dracut","fixed_in":["0:107-7.el10_2"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"dracut","fixed_in":["0:057-115.git20260527.el9_8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"dracut","fixed_in":["0:049-244.git20260529.el8_10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.2","package":"dracut","fixed_in":["059+suse.722.gdd9d67ff5-160000.1.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"dracut","fixed_in":["059+suse.722.gdd9d67ff5-160000.1.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"dracut","fixed_in":["059+suse.722.gdd9d67ff5-160000.1.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"dracut","fixed_in":["059+suse.609.g1a2492e-1.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"dracut","fixed_in":["059+suse.643.g1f1d880-slfo.1.1_1.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"dracut","fixed_in":["055+suse.365.g79144c5-150400.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"dracut","fixed_in":["055+suse.365.g79144c5-150400.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"dracut","fixed_in":["055+suse.365.g79144c5-150400.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"dracut","fixed_in":["055+suse.365.g79144c5-150400.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"dracut","fixed_in":["055+suse.365.g79144c5-150400.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"dracut","fixed_in":["055+suse.365.g79144c5-150400.3.49.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"dracut","fixed_in":["055+suse.402.g2720eea-150500.3.41.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"dracut","fixed_in":["055+suse.402.g2720eea-150500.3.41.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"dracut","fixed_in":["055+suse.402.g2720eea-150500.3.41.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"dracut","fixed_in":["055+suse.402.g2720eea-150500.3.41.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"dracut","fixed_in":["055+suse.402.g2720eea-150500.3.41.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP6","package":"dracut","fixed_in":["059+suse.565.g682306ec5-150600.3.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"dracut","fixed_in":["059+suse.565.g682306ec5-150600.3.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"dracut","fixed_in":["059+suse.565.g682306ec5-150600.3.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"dracut","fixed_in":["059+suse.570.g2b84048d7-150700.3.17.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP7","package":"dracut","fixed_in":["059+suse.570.g2b84048d7-150700.3.17.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"dracut","fixed_in":["044+3-3ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"dracut","fixed_in":["047-2ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"dracut","fixed_in":["048+80-2ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"dracut","fixed_in":["051-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"dracut","fixed_in":["060+5-1ubuntu3.4"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"dracut","fixed_in":["110+suse.35.g9834432-1.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"dracut","fixed_in":["059+suse.722.gdd9d67ff5-160000.1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:10","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"107-7.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dracut-caps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"107-7.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dracut-config-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"107-7.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dracut-config-rescue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"107-7.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dracut-live","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"107-7.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"107-7.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dracut-squash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"107-7.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"dracut-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"107-7.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-115.git20260527.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dracut-caps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-115.git20260527.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dracut-config-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-115.git20260527.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dracut-config-rescue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-115.git20260527.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dracut-live","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-115.git20260527.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-115.git20260527.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dracut-squash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-115.git20260527.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"dracut-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-115.git20260527.el9_8"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"049-244.git20260529.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dracut-caps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"049-244.git20260529.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dracut-config-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"049-244.git20260529.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dracut-config-rescue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"049-244.git20260529.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dracut-live","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"049-244.git20260529.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"049-244.git20260529.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dracut-squash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"049-244.git20260529.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"dracut-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"049-244.git20260529.el8_10"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"102-13"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"055-r23"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"055-r34"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"055-r25"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-89.git20250311.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"dracut-caps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-89.git20250311.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"dracut-config-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-89.git20250311.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"dracut-config-rescue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-89.git20250311.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"dracut-live","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-89.git20250311.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-89.git20250311.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"dracut-squash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-89.git20250311.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"dracut-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-89.git20250311.el9_6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-21.git20230214.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"dracut-caps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-21.git20230214.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"dracut-config-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-21.git20230214.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"dracut-config-rescue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-21.git20230214.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"dracut-live","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-21.git20230214.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-21.git20230214.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"dracut-squash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-21.git20230214.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"dracut-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"057-21.git20230214.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"033-572.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"dracut-caps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"033-572.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"dracut-config-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"033-572.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"dracut-config-rescue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"033-572.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"dracut-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"033-572.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"dracut-fips-aesni","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"033-572.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"033-572.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"dracut-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"033-572.el7.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["059+212-1","059+212-2","059+212-3","059+212-4","059-4","060+5-1","060+5-2~exp1","060+5-7","060+5-8","102-1","102-2","102-3","103-1","103-1.1","103-2","105-1","105-2","105-2~exp1","105-2~exp2","105-2~exp3","105-2~exp4","105-2~exp5","105-2~exp6","105-2~exp7","105-2~exp8","105-3","106-1","106-2","106-3","106-4","106-5","106-5~bpo12+1","106-6","107-1","107-2","108-1","108-2","108-3","108-4","108-5","108-6","108-7","108-8","109-1","109-10","109-11","109-1exp1","109-2","109-3","109-4","109-5","109-6","109-6exp1","109-6exp2","109-6exp3","109-7","109-8","109-9","110-1","110-10","110-11","110-12","110-2","110-3","110-4","110-5","110-6","110-7","110-8","110-9","111-1","111-2","111-3","111-4","111-5","111-6","112-1","112-2","112-3","112-4","112-5","112-6","112-7"]},{"source":"osv","ecosystem":"Debian:13","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["106-6","107-1","107-2","108-1","108-2","108-3","108-4","108-5","108-6","108-7","108-8","109-1","109-10","109-11","109-1exp1","109-2","109-3","109-4","109-5","109-6","109-6exp1","109-6exp2","109-6exp3","109-7","109-8","109-9","110-1","110-10","110-11","110-12","110-2","110-3","110-4","110-5","110-6","110-7","110-8","110-9","111-1","111-2","111-3","111-4","111-5","111-6","112-1","112-2","112-3","112-4","112-5","112-6","112-7"]},{"source":"osv","ecosystem":"Debian:14","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"112-1"}]}],"versions":["106-6","107-1","107-2","108-1","108-2","108-3","108-4","108-5","108-6","108-7","108-8","109-1","109-10","109-11","109-1exp1","109-2","109-3","109-4","109-5","109-6","109-6exp1","109-6exp2","109-6exp3","109-7","109-8","109-9","110-1","110-10","110-11","110-12","110-2","110-3","110-4","110-5","110-6","110-7","110-8","110-9","111-1","111-2","111-3","111-4","111-5","111-6"]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059-17.oe2403sp4"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"050-11.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055-18.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059-17.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059-17.oe2403sp3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-caps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:107-7.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:107-7.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:107-7.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-live","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:107-7.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:107-7.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-config-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:107-7.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-config-rescue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:107-7.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:107-7.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-squash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:107-7.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"dracut-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:107-7.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dracut-caps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-115.git20260527.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dracut-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-115.git20260527.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dracut-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-115.git20260527.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"dracut-live","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-115.git20260527.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-115.git20260527.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dracut-config-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-115.git20260527.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dracut-config-rescue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-115.git20260527.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dracut-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-115.git20260527.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dracut-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-115.git20260527.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-115.git20260527.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dracut-squash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-115.git20260527.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"dracut-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-115.git20260527.el9_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-244.git20260529.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dracut-caps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-244.git20260529.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dracut-config-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-244.git20260529.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dracut-config-rescue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-244.git20260529.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dracut-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-244.git20260529.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dracut-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-244.git20260529.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dracut-live","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-244.git20260529.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-244.git20260529.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dracut-squash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-244.git20260529.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"dracut-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-244.git20260529.el8_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:109-6.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"dracut-caps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:109-6.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"dracut-config-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:109-6.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"dracut-config-rescue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:109-6.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"dracut-live","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:109-6.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:109-6.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"dracut-squash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:109-6.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"dracut-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:109-6.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:105-4.el10_0.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:105-4.el10_0.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-89.git20250311.el9_6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::baseos","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-89.git20250311.el9_6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-25.git20250717.el9_2.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::baseos","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-25.git20250717.el9_2.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-54.git20250423.el9_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::baseos","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-54.git20250423.el9_4.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-223.git20230119.el8_8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::baseos","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-223.git20230119.el8_8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-223.git20230119.el8_8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::baseos","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-223.git20230119.el8_8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:033-577.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:033-577.el7_9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"dracut-caps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"dracut-config-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"dracut-config-rescue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"dracut-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"dracut-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"dracut-live","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"dracut-squash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::baseos","package":"dracut-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"dracut-caps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"dracut-config-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"dracut-config-rescue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"dracut-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"dracut-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"dracut-live","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"dracut-squash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::baseos","package":"dracut-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-138.git20220131.el8_4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"dracut-caps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"dracut-config-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"dracut-config-rescue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"dracut-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"dracut-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"dracut-live","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"dracut-squash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::baseos","package":"dracut-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"dracut-caps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"dracut-config-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"dracut-config-rescue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"dracut-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"dracut-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"dracut-live","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"dracut-squash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::baseos","package":"dracut-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-203.git20220511.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:004-413.el6_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"dracut-fips","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:004-413.el6_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"dracut-kernel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:004-413.el6_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:004-413.el6_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"dracut-caps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:004-413.el6_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"dracut-fips-aesni","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:004-413.el6_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"dracut-generic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:004-413.el6_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"dracut-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:004-413.el6_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:004-414.el6_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:6","package":"dracut-network","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:004-414.el6_10"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:10","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:107-7.el10_2"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:057-115.git20260527.el9_8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:049-244.git20260529.el8_10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.722.gdd9d67ff5-160000.1.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.722.gdd9d67ff5-160000.1.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.722.gdd9d67ff5-160000.1.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.609.g1a2492e-1.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.643.g1f1d880-slfo.1.1_1.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.615.g018c5a4-1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.730.g73d3411aa-160000.1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.649.g0274006-slfo.1.1_1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.730.g73d3411aa-160000.1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.730.g73d3411aa-160000.1.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.365.g79144c5-150400.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.365.g79144c5-150400.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.365.g79144c5-150400.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.365.g79144c5-150400.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.365.g79144c5-150400.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.365.g79144c5-150400.3.49.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.402.g2720eea-150500.3.41.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.402.g2720eea-150500.3.41.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.402.g2720eea-150500.3.41.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.402.g2720eea-150500.3.41.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.402.g2720eea-150500.3.41.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP6","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.565.g682306ec5-150600.3.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.565.g682306ec5-150600.3.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.565.g682306ec5-150600.3.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.570.g2b84048d7-150700.3.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP7","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.570.g2b84048d7-150700.3.17.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.576.g72b98359a-150700.3.23.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP7","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.576.g72b98359a-150700.3.23.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP6","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.571.g3d42218af-150600.3.35.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.571.g3d42218af-150600.3.35.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.571.g3d42218af-150600.3.35.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.371.g92f67c2-150400.3.55.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.371.g92f67c2-150400.3.55.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.371.g92f67c2-150400.3.55.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.371.g92f67c2-150400.3.55.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.371.g92f67c2-150400.3.55.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.371.g92f67c2-150400.3.55.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.408.g34171a9-150500.3.47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.408.g34171a9-150500.3.47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.408.g34171a9-150500.3.47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.408.g34171a9-150500.3.47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"055+suse.408.g34171a9-150500.3.47.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"044+3-3ubuntu0.1~esm1"}]}],"versions":["043-2","043-4","044+3-1","044+3-2","044+3-3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"047-2ubuntu0.1~esm1"}]}],"versions":["045+132-1","047-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"048+80-2ubuntu0.1~esm1"}]}],"versions":["048+80-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"051-1ubuntu0.1~esm1"}]}],"versions":["051-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"060+5-1ubuntu3.4"}]}],"versions":["059-4ubuntu2","060+5-1ubuntu1","060+5-1ubuntu2","060+5-1ubuntu3","060+5-1ubuntu3.1","060+5-1ubuntu3.2","060+5-1ubuntu3.3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["106-2ubuntu5","107-1ubuntu1","107-1ubuntu3","107-1ubuntu5","108-1ubuntu1","108-2ubuntu1","108-3ubuntu2","108-3ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"044+3-3ubuntu0.1~esm1"}]}],"versions":["043-2","043-4","044+3-1","044+3-2","044+3-3"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"047-2ubuntu0.1~esm1"}]}],"versions":["045+132-1","047-2"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"048+80-2ubuntu0.1~esm1"}]}],"versions":["048+80-2"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"051-1ubuntu0.1~esm1"}]}],"versions":["051-1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"060+5-1ubuntu3.4"}]}],"versions":["059-4ubuntu2","060+5-1ubuntu1","060+5-1ubuntu2","060+5-1ubuntu3","060+5-1ubuntu3.1","060+5-1ubuntu3.2","060+5-1ubuntu3.3"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"110-11ubuntu0.1"}]}],"versions":["108-3ubuntu3","108-8ubuntu1","109-5ubuntu1","109-7ubuntu1","109-9ubuntu1","109-11ubuntu1","110-1ubuntu2","110-3ubuntu1","110-5","110-7","110-10","110-11"],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"110+suse.35.g9834432-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.722.gdd9d67ff5-160000.1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"dracut","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"059+suse.730.g73d3411aa-160000.1.1"}]}],"bundled":2}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 10.0 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 6 extended lifecycle support  - extension"},{"vendor":"red hat","product":"red hat enterprise linux 7 extended lifecycle support"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 extended update support long-life add-on"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 extended update support long-life add-on"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.4 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.6 extended update support"},{"vendor":"red hat","product":"red hat hardened images"},{"vendor":"red hat","product":"red hat openshift container platform 4"},{"vendor":"red hat","product":"red hat openshift container platform 4.12"},{"vendor":"red hat","product":"red hat openshift container platform 4.13"},{"vendor":"red hat","product":"red hat openshift container platform 4.14"},{"vendor":"red hat","product":"red hat openshift container platform 4.15"},{"vendor":"red hat","product":"red hat openshift container platform 4.16"},{"vendor":"red hat","product":"red hat openshift container platform 4.17"},{"vendor":"red hat","product":"red hat openshift container platform 4.18"},{"vendor":"red hat","product":"red hat openshift container platform 4.19"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:26532","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26533","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26534","tags":["vendor-advisory","x_refsource_REDHAT","advisory","article"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26713","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:57580","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:57772","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:57775","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:57785","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:61252","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:62269","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:62409","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:62549","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:63044","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:65839","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:65851","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:67857","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:69118","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:69119","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:70586","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:70615","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:74499","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:79114","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:90272","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-6893","tags":["vdb-entry","x_refsource_REDHAT","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2459963","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6893.json","tags":["x_sadp-csaf-vex"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-6893","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-m789-mmmh-7vqc"},{"url":"https://bugzilla.redhat.com/2459963","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-26532.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-26533.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-26534.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-6893","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1782829348.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1783076363.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1787307553.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-6893","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3136","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26532.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-6893","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26533.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26534.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-16445","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2503147","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-16445","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-16445","tags":["advisory"]},{"url":"https://github.com/dracutdevs/dracut/commit/e509c638e6","tags":["article"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26713.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2500889","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_57580.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15816","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15816","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15816","tags":["advisory"]},{"url":"https://github.com/dracutdevs/dracut/blob/master/modules.d/40network/netroot.sh","tags":["article"]},{"url":"https://github.com/dracutdevs/dracut/blob/master/modules.d/99base/dracut-lib.sh","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_57772.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_57775.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_57785.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_61252.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_62269.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69118.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69119.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_74499.json","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/RHEL-276289","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_79114.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:26532","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:26533","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:26534","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622273-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1268322","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6893","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622358-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622431-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202622446-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623444-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1273580","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-16445","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623466-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623513-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623614-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262720-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262721-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262803-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20262851-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263931-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263997-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264078-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264079-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-6893","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8828-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-8637","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-15816","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-16445","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-6893","title":"Dracut: dracut: root code execution via dhcp options command injection","description":"A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.","status":"published","published":"2026-06-10T19:49:27.553Z","modified":"2026-11-02T18:18:14.629Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-78","CWE-78"],"updated_at":"2026-11-02T19:47:07.544208Z"}],"euvd":[{"id":"EUVD-2026-36110","description":"A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.","status":"published","published":"2026-06-10T19:49:27Z","modified":"2026-11-02T18:18:14Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T05:08:38.713005Z"}],"ghsa":[{"id":"GHSA-m789-mmmh-7vqc","title":"A flaw was found in dracut. A remote attacker on the adjacent network can exploit this...","description":"A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.","status":"published","published":"2026-06-10T21:31:41Z","modified":"2026-10-28T00:31:29Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T15:14:32.579072Z"}],"nvd":[{"id":"CVE-2026-6893","description":"A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.","status":"published","published":"2026-06-10T20:17:29.807Z","modified":"2026-10-27T22:17:41.193Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:12:23.485267Z"}],"osv":[{"id":"BELL-CVE-2026-6893","status":"published","published":"2026-06-11T06:10:24.458135Z","modified":"2026-06-18T07:15:42.963077518Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:25.50888Z"},{"id":"DEBIAN-CVE-2026-6893","description":"A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.","status":"published","published":"2026-06-10T20:17:29.807Z","modified":"2026-10-28T09:47:48.724601102Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:46:02.094661Z"},{"id":"OESA-2026-3136","title":"dracut security update","description":"dracut contains tools to create bootable initramfses for the Linux kernel. Unlike previous implementations, dracut hard-codes as little as possible into the initramfs. dracut contains various modules which are driven by the event-based udev. Having root on MD, DM, LVM2, LUKS is supported as well as NFS, iSCSI, NBD, FCoE with the dracut-network package.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut\u0026apos;s legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system\u0026apos;s boot and network behavior.(CVE-2026-6893)","status":"published","published":"2026-07-24T11:12:01Z","modified":"2026-08-18T01:21:25.077931693Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"RHSA-2026:26532","title":"Red Hat Security Advisory: dracut security update","status":"published","published":"2026-06-18T10:09:47Z","modified":"2026-10-15T10:15:57Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:26533","title":"Red Hat Security Advisory: dracut security update","status":"published","published":"2026-06-18T10:09:48Z","modified":"2026-10-15T10:15:58Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:26534","title":"Red Hat Security Advisory: dracut security update","status":"published","published":"2026-06-18T10:09:48Z","modified":"2026-10-15T10:15:58Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:26713","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-06-27T10:24:38Z","modified":"2026-10-09T10:24:00Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:57580","title":"Red Hat Security Advisory: dracut security update","status":"published","published":"2026-08-21T10:14:02Z","modified":"2026-10-15T10:21:49Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:57772","title":"Red Hat Security Advisory: dracut security update","status":"published","published":"2026-08-21T10:14:09Z","modified":"2026-10-15T10:21:54Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:57775","title":"Red Hat Security Advisory: dracut security update","status":"published","published":"2026-08-21T10:14:09Z","modified":"2026-10-15T10:21:54Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:57785","title":"Red Hat Security Advisory: dracut security update","status":"published","published":"2026-08-21T10:14:10Z","modified":"2026-10-15T10:21:55Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.457353Z"},{"id":"RHSA-2026:61252","title":"Red Hat Security Advisory: dracut security update","status":"published","published":"2026-08-31T10:12:10Z","modified":"2026-10-15T10:22:56Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:62269","title":"Red Hat Security Advisory: dracut security update","status":"published","published":"2026-09-02T10:22:26Z","modified":"2026-10-15T10:23:09Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:69118","title":"Red Hat Security Advisory: dracut security update","status":"published","published":"2026-09-21T10:14:52Z","modified":"2026-10-15T10:24:56Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:69119","title":"Red Hat Security Advisory: dracut security update","status":"published","published":"2026-09-21T10:14:53Z","modified":"2026-10-15T10:24:56Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:74499","title":"Red Hat Security Advisory: dracut security update","status":"published","published":"2026-10-02T10:25:56Z","modified":"2026-10-15T10:26:46Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.928316Z"},{"id":"RHSA-2026:79114","title":"Red Hat Security Advisory: dracut security, bug fix, and enhancement update","status":"published","published":"2026-10-10T10:22:41Z","modified":"2026-10-15T10:27:48Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RLSA-2026:26532","title":"Important: dracut security update","description":"The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition.\n\nSecurity Fix(es):\n\n* dracut: dracut: Root code execution via DHCP options command injection (CVE-2026-6893)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-19T06:04:41.448408Z","modified":"2026-06-19T06:30:04.674920668Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:26533","title":"Important: dracut security update","description":"The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition.\n\nSecurity Fix(es):\n\n* dracut: dracut: Root code execution via DHCP options command injection (CVE-2026-6893)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-19T00:03:21.214998Z","modified":"2026-06-19T00:30:04.722195706Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:26534","title":"Important: dracut security update","description":"The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition.\n\nSecurity Fix(es):\n\n* dracut: dracut: Root code execution via DHCP options command injection (CVE-2026-6893)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-06-19T00:00:43.922159Z","modified":"2026-06-19T00:30:04.733171713Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"UBUNTU-CVE-2026-6893","description":"A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.","status":"published","published":"2026-06-10T20:17:00Z","modified":"2026-09-28T22:45:14.39982925Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:57.159276Z"},{"id":"ALSA-2026:26532","title":"Important: dracut security update","description":"The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition.  \n\nSecurity Fix(es):  \n\n  * dracut: dracut: Root code execution via DHCP options command injection (CVE-2026-6893)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-17T00:00:00Z","modified":"2026-10-29T11:30:20.964657309Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:26533","title":"Important: dracut security update","description":"The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition.  \n\nSecurity Fix(es):  \n\n  * dracut: dracut: Root code execution via DHCP options command injection (CVE-2026-6893)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-17T00:00:00Z","modified":"2026-10-29T11:32:34.08415746Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"ALSA-2026:26534","title":"Important: dracut security update","description":"The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition.  \n\nSecurity Fix(es):  \n\n  * dracut: dracut: Root code execution via DHCP options command injection (CVE-2026-6893)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-06-17T00:00:00Z","modified":"2026-10-29T11:02:24.07041302Z","updated_at":"2026-11-02T15:27:54.283654Z"},{"id":"AZL-90111","title":"CVE-2026-6893 affecting package dracut 102-13","description":"A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.","status":"published","published":"2026-06-10T20:17:29Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:25.633663Z"},{"id":"CLSA-2026-1782829348","title":"dracut: Fix of CVE-2026-6893","description":"- CVE-2026-6893: fix network-legacy injection via DHCP hostname/gateway","status":"published","published":"2026-06-30T14:22:42Z","modified":"2026-10-26T09:31:13.186829653Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1783076363","title":"dracut: Fix of CVE-2026-6893","description":"- CVE-2026-6893: fix shell command injection via crafted DHCP and iBFT values in\n  network-legacy, net-lib, initqueue, and iscsi modules","status":"published","published":"2026-07-03T10:59:38Z","modified":"2026-10-26T09:30:25.000293981Z","updated_at":"2026-11-02T15:43:45.794021Z"},{"id":"CLSA-2026-1787307553","title":"dracut: Fix of CVE-2026-6893","description":"- CVE-2026-6893: escape the DHCP-provided hostname, gateway and iSCSI LUN\n  written into the shell scripts that the initramfs later sources","status":"published","published":"2026-08-22T10:30:43Z","modified":"2026-10-26T09:31:42.506322993Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"openSUSE-SU-2026:11076-1","title":"dracut-110+suse.35.g9834432-1.1 on GA media","description":"These are all security issues fixed in the dracut-110+suse.35.g9834432-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-06-22T00:00:00Z","modified":"2026-06-24T09:00:18.691242958Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"openSUSE-SU-2026:21054-1","title":"Security update for dracut","description":"This update for dracut fixes the following issue\n\n- CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).\n\nChanges for dracut:\n\n- Update to version 059+suse.722.gdd9d67ff5:\n * fix(network-legacy): sanitize DHCP values in dhclient-script.sh (bsc#1268322, CVE-2026-6893)\n * fix(network-legacy): add input validation to RFC 3442 route parser\n","status":"published","published":"2026-06-24T21:37:46Z","modified":"2026-06-30T18:24:29.372734495Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"openSUSE-SU-2026:21749-1","title":"Security update for dracut","description":"This update for dracut fixes the following issues:\n\nUpdate to version 059+suse.730.g73d3411aa.\n\n- CVE-2026-6893: improper handling and escaping of DHCP options can lead to command injection and root code execution\n  within the `initramfs` (bsc#1268322).\n- CVE-2026-16445: improper handling and escaping of DHCP options can lead to command injection and root code execution\n  within the `initramfs` during system boot (bsc#1273580).\n\nChanges for dracut:\n\n- Update to version 059+suse.730.g73d3411aa:\n  * fix(network-legacy): sanitize values written to /tmp/net.${netif}.override\n  * fix(network-legacy): sanitize values written to /tmp/net.${netif}.gw\n  * fix(network-legacy): sanitize values written to /tmp/net.${netif}.hostname\n  * fix(network-legacy): strip DHCP-supplied domain to a safe charset\n","status":"published","published":"2026-09-03T16:40:31Z","modified":"2026-09-09T18:23:13.698750288Z","updated_at":"2026-11-02T16:58:42.426393Z"},{"id":"SUSE-SU-2026:22273-1","title":"Security update for dracut","description":"This update for dracut fixes the following issue\n\n- CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).\n\nChanges for dracut:\n\n- Update to version 059+suse.722.gdd9d67ff5:\n * fix(network-legacy): sanitize DHCP values in dhclient-script.sh (bsc#1268322, CVE-2026-6893)\n * fix(network-legacy): add input validation to RFC 3442 route parser\n","status":"published","published":"2026-06-24T21:39:03Z","modified":"2026-06-30T18:24:33.154558111Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"SUSE-SU-2026:22358-1","title":"Security update for dracut","description":"This update for dracut fixes the following issue\n\n- CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).\n\nChanges for dracut:\n\n- Update to version 059+suse.722.gdd9d67ff5:\n * fix(network-legacy): sanitize DHCP values in dhclient-script.sh (bsc#1268322, CVE-2026-6893)\n * fix(network-legacy): add input validation to RFC 3442 route parser\n","status":"published","published":"2026-06-24T21:39:03Z","modified":"2026-07-02T18:24:13.654550648Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"SUSE-SU-2026:22431-1","title":"Security update for dracut","description":"This update for dracut fixes the following issue\n\n- CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).\n\nChanges for dracut:\n\n- Update to version 059+suse.609.g1a2492e:\n * fix(network-legacy): sanitize DHCP values in dhclient-script.sh (bsc#1268322, CVE-2026-6893)\n * fix(network-legacy): add input validation to RFC 3442 route parser\n","status":"published","published":"2026-06-29T09:20:29Z","modified":"2026-07-03T18:24:22.526261696Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"SUSE-SU-2026:22446-1","title":"Security update for dracut","description":"This update for dracut fixes the following issue\n\n- CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).\n\nChanges for dracut:\n\n- Update to version 059+suse.643.g1f1d880:\n * fix(network-legacy): sanitize DHCP values in dhclient-script.sh (bsc#1268322, CVE-2026-6893)\n * fix(network-legacy): add input validation to RFC 3442 route parser\n","status":"published","published":"2026-06-29T09:32:49Z","modified":"2026-07-04T18:24:19.040818371Z","updated_at":"2026-11-02T15:54:03.080707Z"},{"id":"SUSE-SU-2026:23444-1","title":"Security update for dracut","description":"This update for dracut fixes the following issues:\n\n- CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).\n- CVE-2026-16445: Root code execution via DHCP options command injection in NetworkManager initrd module (bsc#1273580).\n\nChanges for dracut:\n\n- Update to version 059+suse.615.g018c5a4:\n * fix(network-legacy): sanitize values written to /tmp/net.${netif}.override\n * fix(network-legacy): sanitize values written to /tmp/net.${netif}.gw\n * fix(network-legacy): sanitize values written to /tmp/net.${netif}.hostname\n * fix(network-legacy): strip DHCP-supplied domain to a safe charset\n * fix(network-manager): ensure safe content of /tmp/dhclient.\"$ifname\".dhcpopts\n","status":"published","published":"2026-09-02T09:30:06Z","modified":"2026-09-14T18:23:11.156854255Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:23466-1","title":"Security update for dracut","description":"This update for dracut fixes the following issues:\n\nUpdate to version 059+suse.730.g73d3411aa.\n\n- CVE-2026-6893: improper handling and escaping of DHCP options can lead to command injection and root code execution\n  within the `initramfs` (bsc#1268322).\n- CVE-2026-16445: improper handling and escaping of DHCP options can lead to command injection and root code execution\n  within the `initramfs` during system boot (bsc#1273580).\n\nChanges for dracut:\n\n- Update to version 059+suse.730.g73d3411aa:\n  * fix(network-legacy): sanitize values written to /tmp/net.${netif}.override\n  * fix(network-legacy): sanitize values written to /tmp/net.${netif}.gw\n  * fix(network-legacy): sanitize values written to /tmp/net.${netif}.hostname\n  * fix(network-legacy): strip DHCP-supplied domain to a safe charset\n","status":"published","published":"2026-09-03T16:40:48Z","modified":"2026-09-14T18:23:12.181900207Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:23513-1","title":"Security update for dracut","description":"This update for dracut fixes the following issues:\n\n- CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).\n- CVE-2026-16445: Root code execution via DHCP options command injection in NetworkManager initrd module (bsc#1273580).\n\nChanges for dracut:\n\n- Update to version 059+suse.649.g0274006:\n * fix(network-legacy): sanitize values written to /tmp/net.${netif}.override\n * fix(network-legacy): sanitize values written to /tmp/net.${netif}.gw\n * fix(network-legacy): sanitize values written to /tmp/net.${netif}.hostname\n * fix(network-legacy): strip DHCP-supplied domain to a safe charset\n * fix(network-manager): ensure safe content of /tmp/dhclient.\"$ifname\".dhcpopts\n","status":"published","published":"2026-09-02T09:14:58Z","modified":"2026-09-15T18:23:08.85793447Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:23614-1","title":"Security update for dracut","description":"This update for dracut fixes the following issues:\n\nUpdate to version 059+suse.730.g73d3411aa.\n\n- CVE-2026-6893: improper handling and escaping of DHCP options can lead to command injection and root code execution\n  within the `initramfs` (bsc#1268322).\n- CVE-2026-16445: improper handling and escaping of DHCP options can lead to command injection and root code execution\n  within the `initramfs` during system boot (bsc#1273580).\n\nChanges for dracut:\n\n- Update to version 059+suse.730.g73d3411aa:\n  * fix(network-legacy): sanitize values written to /tmp/net.${netif}.override\n  * fix(network-legacy): sanitize values written to /tmp/net.${netif}.gw\n  * fix(network-legacy): sanitize values written to /tmp/net.${netif}.hostname\n  * fix(network-legacy): strip DHCP-supplied domain to a safe charset\n","status":"published","published":"2026-09-03T16:40:48Z","modified":"2026-09-29T18:23:19.805056698Z","updated_at":"2026-11-02T15:54:03.991985Z"},{"id":"SUSE-SU-2026:2720-1","title":"Security update for dracut","description":"This update for dracut fixes the following issue\n\n- CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).\n\nChanges for dracut:\n\n- Update to version 055+suse.365.g79144c5:\n * fix(network-legacy): sanitize DHCP values in dhclient-script.sh (bsc#1268322, CVE-2026-6893)\n * fix(network-legacy): add input validation to RFC 3442 route parser\n","status":"published","published":"2026-07-01T13:15:12Z","modified":"2026-07-02T09:15:04.90110199Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:2721-1","title":"Security update for dracut","description":"This update for dracut fixes the following issue\n\n- CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).\n\nChanges for dracut:\n\n- Update to version 055+suse.402.g2720eea:\n * fix(network-legacy): sanitize DHCP values in dhclient-script.sh (bsc#1268322, CVE-2026-6893)\n * fix(network-legacy): add input validation to RFC 3442 route parser\n","status":"published","published":"2026-07-01T13:15:52Z","modified":"2026-07-02T09:15:05.692647952Z","updated_at":"2026-11-02T15:54:04.519245Z"},{"id":"SUSE-SU-2026:2803-1","title":"Security update for dracut","description":"This update for dracut fixes the following issue\n\n- CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).\n\nChanges for dracut:\n\n- Update to version 059+suse.565.g682306ec5:\n * fix(network-legacy): sanitize DHCP values in dhclient-script.sh (bsc#1268322, CVE-2026-6893)\n * fix(network-legacy): add input validation to RFC 3442 route parser\n","status":"published","published":"2026-07-08T19:31:31Z","modified":"2026-07-09T10:00:06.235331133Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:2851-1","title":"Security update for dracut","description":"This update for dracut fixes the following issue\n\n- CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).\n\nChanges for dracut:\n\n- Update to version 059+suse.570.g2b84048d7:\n * fix(network-legacy): sanitize DHCP values in dhclient-script.sh (bsc#1268322, CVE-2026-6893)\n * fix(network-legacy): add input validation to RFC 3442 route parser\n","status":"published","published":"2026-07-10T13:19:21Z","modified":"2026-07-11T09:15:04.789583886Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3931-1","title":"Security update for dracut","description":"This update for dracut fixes the following issues:\n\n- CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).\n- CVE-2026-16445: Root code execution via DHCP options command injection in NetworkManager initrd module (bsc#1273580).\n\nChanges for dracut:\n\n- Update to version 059+suse.576.g72b98359a:\n * fix(network-legacy): sanitize values written to /tmp/net.${netif}.override\n * fix(network-legacy): sanitize values written to /tmp/net.${netif}.gw\n * fix(network-legacy): sanitize values written to /tmp/net.${netif}.hostname\n * fix(network-legacy): strip DHCP-supplied domain to a safe charset\n","status":"published","published":"2026-09-03T07:19:33Z","modified":"2026-09-10T18:23:17.850013684Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"SUSE-SU-2026:3997-1","title":"Security update for dracut","description":"This update for dracut fixes the following issues:\n\nUpdate to version 059+suse.730.g73d3411aa.\n\n- CVE-2026-6893: improper handling and escaping of DHCP options can lead to command injection and root code execution\n  within the `initramfs` (bsc#1268322).\n- CVE-2026-16445: improper handling and escaping of DHCP options can lead to command injection and root code execution\n  within the `initramfs` during system boot (bsc#1273580).\n\nChanges for dracut:\n\n- Update to version 059+suse.730.g73d3411aa:\n  * fix(network-legacy): sanitize values written to /tmp/net.${netif}.override\n  * fix(network-legacy): sanitize values written to /tmp/net.${netif}.gw\n  * fix(network-legacy): sanitize values written to /tmp/net.${netif}.hostname\n  * fix(network-legacy): strip DHCP-supplied domain to a safe charset\n","status":"published","published":"2026-09-07T07:23:02Z","modified":"2026-09-13T18:23:14.202748799Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"SUSE-SU-2026:4078-1","title":"Security update for dracut","description":"This update for dracut fixes the following issues:\n\n- CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).\n- CVE-2026-16445: Root code execution via DHCP options command injection in NetworkManager initrd module (bsc#1273580).\n\nChanges for dracut:\n\n- Update to version 055+suse.371.g92f67c2:\n * fix(network-legacy): sanitize values written to /tmp/net.${netif}.override\n * fix(network-legacy): sanitize values written to /tmp/net.${netif}.gw\n * fix(network-legacy): sanitize values written to /tmp/net.${netif}.hostname\n * fix(network-legacy): strip DHCP-supplied domain to a safe charset\n","status":"published","published":"2026-09-08T07:13:23Z","modified":"2026-09-13T18:23:22.558708563Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"SUSE-SU-2026:4079-1","title":"Security update for dracut","description":"This update for dracut fixes the following issues:\n\n- CVE-2026-6893: Root code execution via DHCP options command injection (bsc#1268322).\n- CVE-2026-16445: Root code execution via DHCP options command injection in NetworkManager initrd module (bsc#1273580).\n\nChanges for dracut:\n\n- Update to version 055+suse.408.g34171a9:\n * fix(network-legacy): sanitize values written to /tmp/net.${netif}.override\n * fix(network-legacy): sanitize values written to /tmp/net.${netif}.gw\n * fix(network-legacy): sanitize values written to /tmp/net.${netif}.hostname\n * fix(network-legacy): strip DHCP-supplied domain to a safe charset\n","status":"published","published":"2026-09-08T07:14:09Z","modified":"2026-09-13T18:23:21.645593157Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"USN-8828-1","title":"dracut vulnerabilities","description":"It was discovered that dracut created initramfs images with overly\npermissive permissions under certain circumstances. A local attacker could\npossibly use this issue to obtain sensitive information. This issue only\naffected Ubuntu 16.04 LTS. (CVE-2016-8637)\n\nIt was discovered that dracut did not properly sanitize DHCP options\nbefore writing them to shell scripts under certain circumstances. A remote\nattacker controlling a DHCP server on the local network could possibly use\nthis issue to execute arbitrary code as root during system boot. This issue\nonly affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS,\nUbuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2026-6893)\n\nIt was discovered that dracut did not properly quote error messages written\nto shell scripts under certain circumstances. A remote attacker controlling\na DHCP server on the local network could possibly use this issue to execute\narbitrary code as root during system boot. This issue only affected Ubuntu\n16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu\n24.04 LTS. (CVE-2026-15816)\n\nIt was discovered that dracut did not properly sanitize network\nconfiguration data before writing it to a temporary shell script under\ncertain circumstances. A remote attacker controlling DHCP on the local\nnetwork could possibly use this issue to execute arbitrary code as root\nduring system boot. This issue only affected Ubuntu 22.04 LTS.\n(CVE-2026-16445)","status":"published","published":"2026-09-28T13:33:37Z","modified":"2026-09-28T22:57:43.497701288Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}