Red Hat Security Advisory

RHSA-2026:61252

dracut security update

Released 2026-08-31 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS E4S (v.8.8) dracut-049-223.git20230119.el8_8.1, dracut-network-049-223.git20230119.el8_8.1
Red Hat Enterprise Linux BaseOS TUS (v.8.8) dracut-049-223.git20230119.el8_8.1, dracut-network-049-223.git20230119.el8_8.1

Fixes 3 records

TI-2026-13743 CVE-2026-16445 · GHSA-4672-282m-8fgr

Dracut: dracut: root code execution via dhcp options command injection in networkmanager initrd module

MEDIUM 41

A flaw was found in dracut.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.03222 Published 2026-07-21 Fixed in 049-244.git20260529.el8_10, 049-138.git20220131.el8_4.1 +4 CWE-78

TI-2026-06043 CVE-2026-6893 · GHSA-m789-mmmh-7vqc

Dracut: dracut: root code execution via dhcp options command injection

LOW 37

A flaw was found in dracut.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.01275 Published 2026-06-10 Fixed in 107-7.el10_2, 105-4.el10_0.1 +21 CWE-78

TI-2026-13304 CVE-2026-15816 · GHSA-8pxm-cr92-crx8

Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()

LOW 35

A flaw was found in dracut.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00371 Published 2026-08-07 Partial fix · 107-9.el10_2, 105-4.el10_0.1 +24 CWE-78