Dracut: dracut: root code execution via dhcp options command injection
Priority LOW 37CWE-78Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-78.
Summary
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01275 70th percentileScored 2026-11-07
Fix Fixed Red Hat: 23 advisories
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | — | 107-7.el10_2 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | — | 105-4.el10_0.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION | — | 004-413.el6_10 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION | — | 004-414.el6_10 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support | — | 033-577.el7_9 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | 049-244.git20260529.el8_10 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | — | 049-138.git20220131.el8_4.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | — | 049-138.git20220131.el8_4.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | — | 049-203.git20220511.el8_6.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | — | 049-203.git20220511.el8_6.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | — | 049-223.git20230119.el8_8.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | — | 049-223.git20230119.el8_8.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 057-115.git20260527.el9_8 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 057-115.git20260527.el9_8 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | — | 057-25.git20250717.el9_2.2 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | — | 057-54.git20250423.el9_4.3 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | — | 057-89.git20250311.el9_6.1 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.12 | — | 412.86.202610250235-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.13 | — | 413.92.202609080414-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.14 | — | 414.92.202609011250-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | 415.92.202609140326-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | — | 416.94.202609011112-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.17 | — | 417.94.202609191027-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | 418.94.202609031320-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | 418.94.202609171815-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.19 | — | 4.19.9.6.202609021231-0 | Patch available | CNA |
| Red Hat | Red Hat Hardened Images | — | 109-6.hum1 | Patch available | CNA |
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in 107-7.el10_2 Patch available CNA
- Red Hat Enterprise Linux 10.0 Extended Update Support VendorRed Hat Affected — Fixed in 105-4.el10_0.1 Patch available CNA
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION VendorRed Hat Affected — Fixed in 004-413.el6_10 Patch available CNA
- Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION VendorRed Hat Affected — Fixed in 004-414.el6_10 Patch available CNA
- Red Hat Enterprise Linux 7 Extended Lifecycle Support VendorRed Hat Affected — Fixed in 033-577.el7_9 Patch available CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 049-244.git20260529.el8_10 Patch available CNA
- Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 049-138.git20220131.el8_4.1 Patch available CNA
- Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 049-138.git20220131.el8_4.1 Patch available CNA
- Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 049-203.git20220511.el8_6.1 Patch available CNA
- Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 049-203.git20220511.el8_6.1 Patch available CNA
- Red Hat Enterprise Linux 8.8 Telecommunications Update Service VendorRed Hat Affected — Fixed in 049-223.git20230119.el8_8.1 Patch available CNA
- Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 049-223.git20230119.el8_8.1 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 057-115.git20260527.el9_8 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 057-115.git20260527.el9_8 Patch available CNA
- Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 057-25.git20250717.el9_2.2 Patch available CNA
- Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 057-54.git20250423.el9_4.3 Patch available CNA
- Red Hat Enterprise Linux 9.6 Extended Update Support VendorRed Hat Affected — Fixed in 057-89.git20250311.el9_6.1 Patch available CNA
- Red Hat OpenShift Container Platform 4.12 VendorRed Hat Affected — Fixed in 412.86.202610250235-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.13 VendorRed Hat Affected — Fixed in 413.92.202609080414-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.14 VendorRed Hat Affected — Fixed in 414.92.202609011250-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in 415.92.202609140326-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.16 VendorRed Hat Affected — Fixed in 416.94.202609011112-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.17 VendorRed Hat Affected — Fixed in 417.94.202609191027-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in 418.94.202609031320-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in 418.94.202609171815-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.19 VendorRed Hat Affected — Fixed in 4.19.9.6.202609021231-0 Patch available CNA
- Red Hat Hardened Images VendorRed Hat Affected — Fixed in 109-6.hum1 Patch available CNA
CPE names CNA · 28
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:/o:redhat:enterprise_linux:10.2 | 10.2 | — | Red Hat |
| cpe:/o:redhat:enterprise_linux_eus:10.0 | 10.0 | — | Red Hat |
| cpe:/o:redhat:rhel_els:6 | 6 | — | Red Hat |
| cpe:/o:redhat:rhel_els:7 | 7 | — | Red Hat |
| cpe:/o:redhat:enterprise_linux:8::baseos | 8 | — | Red Hat |
| cpe:/o:redhat:rhel_aus:8.4::baseos | 8.4 | — | Red Hat |
| cpe:/o:redhat:rhel_eus_long_life:8.4::baseos | 8.4 | — | Red Hat |
| cpe:/o:redhat:rhel_aus:8.6::baseos | 8.6 | — | Red Hat |
| cpe:/o:redhat:rhel_eus_long_life:8.6::baseos | 8.6 | — | Red Hat |
| cpe:/o:redhat:rhel_e4s:8.8::baseos | 8.8 | — | Red Hat |
- cpe:/o:redhat:enterprise_linux:10.2 Versions 10.2 — ·Red Hat
- cpe:/o:redhat:enterprise_linux_eus:10.0 Versions 10.0 — ·Red Hat
- cpe:/o:redhat:rhel_els:6 Versions 6 — ·Red Hat
- cpe:/o:redhat:rhel_els:7 Versions 7 — ·Red Hat
- cpe:/o:redhat:enterprise_linux:8::baseos Versions 8 — ·Red Hat
- cpe:/o:redhat:rhel_aus:8.4::baseos Versions 8.4 — ·Red Hat
- cpe:/o:redhat:rhel_eus_long_life:8.4::baseos Versions 8.4 — ·Red Hat
- cpe:/o:redhat:rhel_aus:8.6::baseos Versions 8.6 — ·Red Hat
- cpe:/o:redhat:rhel_eus_long_life:8.6::baseos Versions 8.6 — ·Red Hat
- cpe:/o:redhat:rhel_e4s:8.8::baseos Versions 8.8 — ·Red Hat
Show 18 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:/o:redhat:rhel_tus:8.8::baseos | 8.8 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:9::appstream | 9 | — | Red Hat |
| cpe:/o:redhat:enterprise_linux:9::baseos | 9 | — | Red Hat |
| cpe:/a:redhat:rhel_e4s:9.2::appstream | 9.2 | — | Red Hat |
| cpe:/o:redhat:rhel_e4s:9.2::baseos | 9.2 | — | Red Hat |
| cpe:/a:redhat:rhel_e4s:9.4::appstream | 9.4 | — | Red Hat |
| cpe:/o:redhat:rhel_e4s:9.4::baseos | 9.4 | — | Red Hat |
| cpe:/a:redhat:rhel_eus:9.6::appstream | 9.6 | — | Red Hat |
| cpe:/o:redhat:rhel_eus:9.6::baseos | 9.6 | — | Red Hat |
| cpe:/a:redhat:openshift:4.12::el8 | 4.12 | — | Red Hat |
| cpe:/a:redhat:openshift:4.13::el9 | 4.13 | — | Red Hat |
| cpe:/a:redhat:openshift:4.14::el9 | 4.14 | — | Red Hat |
| cpe:/a:redhat:openshift:4.15::el9 | 4.15 | — | Red Hat |
| cpe:/a:redhat:openshift:4.16::el9 | 4.16 | — | Red Hat |
| cpe:/a:redhat:openshift:4.17::el9 | 4.17 | — | Red Hat |
| cpe:/a:redhat:openshift:4.18::el9 | 4.18 | — | Red Hat |
| cpe:/a:redhat:openshift:4.19::el9 | 4.19 | — | Red Hat |
| cpe:/a:redhat:hummingbird:1 | 1 | — | Red Hat |
- cpe:/o:redhat:rhel_tus:8.8::baseos Versions 8.8 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:9::appstream Versions 9 — ·Red Hat
- cpe:/o:redhat:enterprise_linux:9::baseos Versions 9 — ·Red Hat
- cpe:/a:redhat:rhel_e4s:9.2::appstream Versions 9.2 — ·Red Hat
- cpe:/o:redhat:rhel_e4s:9.2::baseos Versions 9.2 — ·Red Hat
- cpe:/a:redhat:rhel_e4s:9.4::appstream Versions 9.4 — ·Red Hat
- cpe:/o:redhat:rhel_e4s:9.4::baseos Versions 9.4 — ·Red Hat
- cpe:/a:redhat:rhel_eus:9.6::appstream Versions 9.6 — ·Red Hat
- cpe:/o:redhat:rhel_eus:9.6::baseos Versions 9.6 — ·Red Hat
- cpe:/a:redhat:openshift:4.12::el8 Versions 4.12 — ·Red Hat
- cpe:/a:redhat:openshift:4.13::el9 Versions 4.13 — ·Red Hat
- cpe:/a:redhat:openshift:4.14::el9 Versions 4.14 — ·Red Hat
- cpe:/a:redhat:openshift:4.15::el9 Versions 4.15 — ·Red Hat
- cpe:/a:redhat:openshift:4.16::el9 Versions 4.16 — ·Red Hat
- cpe:/a:redhat:openshift:4.17::el9 Versions 4.17 — ·Red Hat
- cpe:/a:redhat:openshift:4.18::el9 Versions 4.18 — ·Red Hat
- cpe:/a:redhat:openshift:4.19::el9 Versions 4.19 — ·Red Hat
- cpe:/a:redhat:hummingbird:1 Versions 1 — ·Red Hat
Remediation
Red Hat 23 advisories
- RHSA-2026:90272 Released 2026-10-27 · Red Hat rating CriticalOpenShift Container Platform 4.12.102 bug fix and security update
- Red Hat OpenShift Container Platform 4.12 rhcos-x86_64-412.86.202610250235-0
- RHSA-2026:79114 Released 2026-10-08 · Red Hat rating Importantdracut security, bug fix, and enhancement update
- Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION) dracut-004-414.el6_10, dracut-network-004-414.el6_10
- RHSA-2026:70615 Released 2026-10-01 · Red Hat rating ImportantOpenShift Container Platform 4.18.56 bug fix and security update
- Red Hat OpenShift Container Platform 4.18 rhcos-aarch64-418.94.202609171815-0, rhcos-ppc64le-418.94.202609171815-0, rhcos-s390x-418.94.202609171815-0 +1
Show 20 more Red Hat advisories
- RHSA-2026:74499 Released 2026-10-01 · Red Hat rating Importantdracut security update
- Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION) dracut-004-413.el6_10, dracut-fips-004-413.el6_10, dracut-kernel-004-413.el6_10 +1
- Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION) dracut-caps-004-413.el6_10, dracut-fips-aesni-004-413.el6_10, dracut-generic-004-413.el6_10 +1
- RHSA-2026:70586 Released 2026-10-01 · Red Hat rating ImportantOpenShift Container Platform 4.17.58 bug fix and security update
- Red Hat OpenShift Container Platform 4.17 rhcos-aarch64-417.94.202609191027-0, rhcos-ppc64le-417.94.202609191027-0, rhcos-s390x-417.94.202609191027-0 +1
- RHSA-2026:67857 Released 2026-09-28 · Red Hat rating ImportantOpenShift Container Platform 4.15.69 bug fix and security update
- Red Hat OpenShift Container Platform 4.15 rhcos-aarch64-415.92.202609140326-0, rhcos-ppc64le-415.92.202609140326-0, rhcos-s390x-415.92.202609140326-0 +1
- RHSA-2026:69118 Released 2026-09-21 · Red Hat rating Importantdracut security update
- Red Hat Enterprise Linux BaseOS AUS (v.8.4) dracut-049-138.git20220131.el8_4.1, dracut-caps-049-138.git20220131.el8_4.1, dracut-config-generic-049-138.git20220131.el8_4.1 +5
- Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) dracut-049-138.git20220131.el8_4.1, dracut-caps-049-138.git20220131.el8_4.1, dracut-config-generic-049-138.git20220131.el8_4.1 +5
- RHSA-2026:69119 Released 2026-09-21 · Red Hat rating Importantdracut security update
- Red Hat Enterprise Linux BaseOS AUS (v.8.6) dracut-049-203.git20220511.el8_6.1, dracut-caps-049-203.git20220511.el8_6.1, dracut-config-generic-049-203.git20220511.el8_6.1 +5
- Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) dracut-049-203.git20220511.el8_6.1, dracut-caps-049-203.git20220511.el8_6.1, dracut-config-generic-049-203.git20220511.el8_6.1 +5
- RHSA-2026:65839 Released 2026-09-17 · Red Hat rating ImportantOpenShift Container Platform 4.13.71 bug fix and security update
- Red Hat OpenShift Container Platform 4.13 rhcos-x86_64-413.92.202609080414-0
- RHSA-2026:65851 Released 2026-09-17 · Red Hat rating ImportantOpenShift Container Platform 4.18.55 bug fix and security update
- Red Hat OpenShift Container Platform 4.18 rhcos-aarch64-418.94.202609031320-0, rhcos-ppc64le-418.94.202609031320-0, rhcos-s390x-418.94.202609031320-0 +1
- RHSA-2026:62409 Released 2026-09-14 · Red Hat rating ImportantOpenShift Container Platform 4.14.73 bug fix and security update
- Red Hat OpenShift Container Platform 4.14 rhcos-aarch64-414.92.202609011250-0, rhcos-ppc64le-414.92.202609011250-0, rhcos-s390x-414.92.202609011250-0 +1
- RHSA-2026:62549 Released 2026-09-10 · Red Hat rating ImportantOpenShift Container Platform 4.16.70 bug fix and security update
- Red Hat OpenShift Container Platform 4.16 rhcos-aarch64-416.94.202609011112-0, rhcos-ppc64le-416.94.202609011112-0, rhcos-s390x-416.94.202609011112-0 +1
- RHSA-2026:63044 Released 2026-09-09 · Red Hat rating ImportantOpenShift Container Platform 4.19.46 bug fix and security update
- Red Hat OpenShift Container Platform 4.19 rhcos-aarch64-4.19.9.6.202609021231-0, rhcos-ppc64le-4.19.9.6.202609021231-0, rhcos-s390x-4.19.9.6.202609021231-0 +1
- RHSA-2026:62269 Released 2026-09-01 · Red Hat rating Importantdracut security update
- Red Hat Enterprise Linux Server (v. 7 ELS) dracut-033-577.el7_9, dracut-network-033-577.el7_9
- RHSA-2026:61252 Released 2026-08-31 · Red Hat rating Importantdracut security update
- Red Hat Enterprise Linux BaseOS E4S (v.8.8) dracut-049-223.git20230119.el8_8.1, dracut-network-049-223.git20230119.el8_8.1
- Red Hat Enterprise Linux BaseOS TUS (v.8.8) dracut-049-223.git20230119.el8_8.1, dracut-network-049-223.git20230119.el8_8.1
- RHSA-2026:57772 Released 2026-08-20 · Red Hat rating Importantdracut security update
- Red Hat Enterprise Linux BaseOS EUS (v.9.6) dracut-057-89.git20250311.el9_6.1, dracut-network-057-89.git20250311.el9_6.1
- RHSA-2026:57785 Released 2026-08-20 · Red Hat rating Importantdracut security update
- Red Hat Enterprise Linux BaseOS E4S (v.9.4) dracut-057-54.git20250423.el9_4.3, dracut-network-057-54.git20250423.el9_4.3
- RHSA-2026:57775 Released 2026-08-20 · Red Hat rating Importantdracut security update
- Red Hat Enterprise Linux BaseOS E4S (v.9.2) dracut-057-25.git20250717.el9_2.2, dracut-network-057-25.git20250717.el9_2.2
- RHSA-2026:57580 Released 2026-08-20 · Red Hat rating Importantdracut security update
- Red Hat Enterprise Linux BaseOS EUS (v. 10.0) dracut-105-4.el10_0.1, dracut-network-105-4.el10_0.1
- RHSA-2026:26713 Released 2026-06-17 · Red Hat rating ImportantRed Hat Hardened Images RPMs bug fix and enhancement update
- Red Hat Hardened Images dracut-109-6.hum1@aarch64, dracut-109-6.hum1@src, dracut-109-6.hum1@x86_64 +14
- RHSA-2026:26533 Released 2026-06-17 · Red Hat rating Importantdracut security update
- Red Hat Enterprise Linux AppStream (v. 9) dracut-caps-057-115.git20260527.el9_8, dracut-live-057-115.git20260527.el9_8
- Red Hat Enterprise Linux BaseOS (v. 9) dracut-057-115.git20260527.el9_8, dracut-config-generic-057-115.git20260527.el9_8, dracut-config-rescue-057-115.git20260527.el9_8 +3
- RHSA-2026:26532 Released 2026-06-17 · Red Hat rating Importantdracut security update
- Red Hat Enterprise Linux AppStream (v. 10) dracut-caps-107-7.el10_2, dracut-live-107-7.el10_2
- Red Hat Enterprise Linux BaseOS (v. 10) dracut-107-7.el10_2, dracut-config-generic-107-7.el10_2, dracut-config-rescue-107-7.el10_2 +3
- RHSA-2026:26534 Released 2026-06-17 · Red Hat rating Importantdracut security update
- Red Hat Enterprise Linux BaseOS (v. 8) dracut-049-244.git20260529.el8_10, dracut-caps-049-244.git20260529.el8_10, dracut-config-generic-049-244.git20260529.el8_10 +5
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux AppStream (v. 10) | Fixed | RHSA-2026:26532 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2026:26533 |
| Red Hat Enterprise Linux BaseOS (v. 10) | Fixed | RHSA-2026:26532 |
| Red Hat Enterprise Linux BaseOS (v. 8) | Fixed | RHSA-2026:26534 |
| Red Hat Enterprise Linux BaseOS (v. 9) | Fixed | RHSA-2026:26533 |
| Red Hat Enterprise Linux BaseOS AUS (v.8.4) | Fixed | RHSA-2026:69118 |
| Red Hat Enterprise Linux BaseOS AUS (v.8.6) | Fixed | RHSA-2026:69119 |
| Red Hat Enterprise Linux BaseOS E4S (v.8.8) | Fixed | RHSA-2026:61252 |
| Red Hat Enterprise Linux BaseOS E4S (v.9.2) | Fixed | RHSA-2026:57775 |
| Red Hat Enterprise Linux BaseOS E4S (v.9.4) | Fixed | RHSA-2026:57785 |
| Red Hat Enterprise Linux BaseOS EUS (v. 10.0) | Fixed | RHSA-2026:57580 |
| Red Hat Enterprise Linux BaseOS EUS (v.9.6) | Fixed | RHSA-2026:57772 |
| Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) | Fixed | RHSA-2026:69118 |
| Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) | Fixed | RHSA-2026:69119 |
| Red Hat Enterprise Linux BaseOS TUS (v.8.8) | Fixed | RHSA-2026:61252 |
| Red Hat Enterprise Linux Server (v. 7 ELS) | Fixed | RHSA-2026:62269 |
| Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION) | Fixed | RHSA-2026:74499, RHSA-2026:79114 |
| Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION) | Fixed | RHSA-2026:74499 |
| Red Hat Hardened Images | Fixed | RHSA-2026:26713 |
| Red Hat OpenShift Container Platform 4.12 | Fixed | RHSA-2026:90272 |
| Red Hat OpenShift Container Platform 4.13 | Fixed | RHSA-2026:65839 |
| Red Hat OpenShift Container Platform 4.14 | Fixed | RHSA-2026:62409 |
| Red Hat OpenShift Container Platform 4.15 | Fixed | RHSA-2026:67857 |
| Red Hat OpenShift Container Platform 4.16 | Fixed | RHSA-2026:62549 |
| Red Hat OpenShift Container Platform 4.17 | Fixed | RHSA-2026:70586 |
| Red Hat OpenShift Container Platform 4.18 | Fixed | RHSA-2026:65851, RHSA-2026:70615 |
| Red Hat OpenShift Container Platform 4.19 | Fixed | RHSA-2026:63044 |
Not affected: 14 products
- Red Hat Enterprise Linux AppStream E4S (v.9.2)
- Red Hat Enterprise Linux AppStream E4S (v.9.4)
- Red Hat Enterprise Linux AppStream EUS (v. 10.0)
- Red Hat Enterprise Linux AppStream EUS (v.9.6)
- Red Hat Enterprise Linux BaseOS E4S (v.8.8)
- Red Hat Enterprise Linux BaseOS E4S (v.9.2)
- Red Hat Enterprise Linux BaseOS E4S (v.9.4)
- Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
- Red Hat Enterprise Linux BaseOS EUS (v.9.6)
- Red Hat Enterprise Linux BaseOS TUS (v.8.8)
- Red Hat Enterprise Linux Server (v. 7 ELS)
- Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)
- Red Hat Enterprise Linux Server Optional (v. 7 ELS)
- Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)
Timeline
- 2026-10-02 Threatist record created from CVE-2026-6893
- 2026-10-03 Alias added: GHSA-m789-mmmh-7vqc
- 2026-10-08 Fix available: dracut@0:004-414.el6_10 · CNA
- 2026-10-08 1 new reference · CNA
- 2026-10-08 Fix available: openshift/[email protected], openshift/[email protected], openshift/[email protected] +5 · CNA
- 2026-10-09 Fix available: RHSA-2026:79114 · Red Hat
- 2026-10-09 Affected versions changed · Red Hat
- 2026-10-25 Priority changed: MEDIUM → LOW
- 2026-10-27 Fix available: openshift/[email protected] · CNA
- 2026-10-27 1 new reference · CNA
- 2026-10-27 Fix available: Red Hat OpenShift Container Platform 4.12 · Red Hat
- 2026-10-29 Fix available: RHSA-2026:90272 · Red Hat
References
Advisory 23
- RHSA-2026:26532
- RHSA-2026:26533
- RHSA-2026:26534
- RHSA-2026:26713
- RHSA-2026:57580
- RHSA-2026:57772
- RHSA-2026:57775
- RHSA-2026:57785
- RHSA-2026:61252
- RHSA-2026:62269
- RHSA-2026:62409
- RHSA-2026:62549
- RHSA-2026:63044
- RHSA-2026:65839
- RHSA-2026:65851
- RHSA-2026:67857
- RHSA-2026:69118
- RHSA-2026:69119
- RHSA-2026:70586
- RHSA-2026:70615
- RHSA-2026:74499
- RHSA-2026:79114
- RHSA-2026:90272
More Red Hat vulnerabilities
- TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
- TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
- TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
- TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2026-6893 · CVE Program
- CVE-2026-6893 · NVD
- FIRST EPSS
- GHSA-m789-mmmh-7vqc · GitHub Advisory Database · CC BY 4.0
- CVE-2026-6893 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences