Red Hat Security Advisory

RHSA-2026:26534

dracut security update

Released 2026-06-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) dracut-049-244.git20260529.el8_10, dracut-caps-049-244.git20260529.el8_10, dracut-config-generic-049-244.git20260529.el8_10 +5

Fixes 2 records

TI-2026-13743 CVE-2026-16445 · GHSA-4672-282m-8fgr

Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module

MEDIUM 41

A flaw was found in dracut.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.03222 Published 2026-07-21 Fixed in 049-244.git20260529.el8_10, 049-138.git20220131.el8_4.1 +4 CWE-78

TI-2026-06043 CVE-2026-6893 · GHSA-m789-mmmh-7vqc

Dracut: dracut: root code execution via dhcp options command injection

LOW 37

A flaw was found in dracut.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.01275 Published 2026-06-10 Fixed in 107-7.el10_2, 105-4.el10_0.1 +21 CWE-78