Read the docs
TI-2026-13304 Aliases CVE-2026-15816GHSA-8pxm-cr92-crx8

Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()

Priority LOW 35CWE-78Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 29 fixed, 1 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-78.

Summary

A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP server can inject a command-substitution sequence that executes as root the next time dracut sources its emergency hook scripts during standard boot-failure handling.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00371 31st percentileScored 2026-11-07
Fix Partial Red Hat: 26 advisoriesRed Hat: 29 fixed, 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Red HatRed Hat Enterprise Linux 10—107-9.el10_2Patch availableCNA
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support—105-4.el10_0.1Patch availableCNA
Red HatRed Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION—004-413.el6_10Patch availableCNA
Red HatRed Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION—004-414.el6_10Patch availableCNA
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support—033-577.el7_9Patch availableCNA
Red HatRed Hat Enterprise Linux 8—049-246.git20260728.el8_10Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support—049-138.git20220131.el8_4.1Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On—049-138.git20220131.el8_4.1Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support—049-203.git20220511.el8_6.1Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On—049-203.git20220511.el8_6.1Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service—049-223.git20230119.el8_8.1Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions—049-223.git20230119.el8_8.1Patch availableCNA
Red HatRed Hat Enterprise Linux 9—057-120.git20260728.el9_8Patch availableCNA
Red HatRed Hat Enterprise Linux 9—057-120.git20260728.el9_8Patch availableCNA
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions—057-25.git20250717.el9_2.2Patch availableCNA
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions—057-54.git20250423.el9_4.3Patch availableCNA
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support—057-89.git20250311.el9_6.1Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.12—412.86.202610250235-0Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.13—413.92.202609080414-0Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.14—414.92.202609011250-0Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.15—415.92.202609140326-0Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.16—416.94.202609011112-0Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.17—417.94.202609191027-0Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—418.94.202609031320-0Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.18—418.94.202609171815-0Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.19—4.19.9.6.202609021231-0Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.20—4.20.9.6.202608260604-0Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.21—4.21.9.6.202609021100-0Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.22—4.22.9.8.202608251819-0Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4.22—4.22.9.8.202609081748-0Patch availableCNA
Red HatRed Hat Hardened Images——Not affectedCNA
Red HatRed Hat OpenShift Container Platform 5——No fix listedCNA
  • Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in 107-9.el10_2 Patch available CNA
  • Red Hat Enterprise Linux 10.0 Extended Update Support VendorRed Hat Affected — Fixed in 105-4.el10_0.1 Patch available CNA
  • Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION VendorRed Hat Affected — Fixed in 004-413.el6_10 Patch available CNA
  • Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION VendorRed Hat Affected — Fixed in 004-414.el6_10 Patch available CNA
  • Red Hat Enterprise Linux 7 Extended Lifecycle Support VendorRed Hat Affected — Fixed in 033-577.el7_9 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 049-246.git20260728.el8_10 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 049-138.git20220131.el8_4.1 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 049-138.git20220131.el8_4.1 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 049-203.git20220511.el8_6.1 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 049-203.git20220511.el8_6.1 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Telecommunications Update Service VendorRed Hat Affected — Fixed in 049-223.git20230119.el8_8.1 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 049-223.git20230119.el8_8.1 Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 057-120.git20260728.el9_8 Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 057-120.git20260728.el9_8 Patch available CNA
  • Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 057-25.git20250717.el9_2.2 Patch available CNA
  • Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 057-54.git20250423.el9_4.3 Patch available CNA
  • Red Hat Enterprise Linux 9.6 Extended Update Support VendorRed Hat Affected — Fixed in 057-89.git20250311.el9_6.1 Patch available CNA
  • Red Hat OpenShift Container Platform 4.12 VendorRed Hat Affected — Fixed in 412.86.202610250235-0 Patch available CNA
  • Red Hat OpenShift Container Platform 4.13 VendorRed Hat Affected — Fixed in 413.92.202609080414-0 Patch available CNA
  • Red Hat OpenShift Container Platform 4.14 VendorRed Hat Affected — Fixed in 414.92.202609011250-0 Patch available CNA
  • Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in 415.92.202609140326-0 Patch available CNA
  • Red Hat OpenShift Container Platform 4.16 VendorRed Hat Affected — Fixed in 416.94.202609011112-0 Patch available CNA
  • Red Hat OpenShift Container Platform 4.17 VendorRed Hat Affected — Fixed in 417.94.202609191027-0 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in 418.94.202609031320-0 Patch available CNA
  • Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in 418.94.202609171815-0 Patch available CNA
  • Red Hat OpenShift Container Platform 4.19 VendorRed Hat Affected — Fixed in 4.19.9.6.202609021231-0 Patch available CNA
  • Red Hat OpenShift Container Platform 4.20 VendorRed Hat Affected — Fixed in 4.20.9.6.202608260604-0 Patch available CNA
  • Red Hat OpenShift Container Platform 4.21 VendorRed Hat Affected — Fixed in 4.21.9.6.202609021100-0 Patch available CNA
  • Red Hat OpenShift Container Platform 4.22 VendorRed Hat Affected — Fixed in 4.22.9.8.202608251819-0 Patch available CNA
  • Red Hat OpenShift Container Platform 4.22 VendorRed Hat Affected — Fixed in 4.22.9.8.202609081748-0 Patch available CNA
  • Red Hat Hardened Images VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat OpenShift Container Platform 5 VendorRed Hat Affected — Fixed in — No fix listed CNA

CPE names CNA · 32

CPEVersionsRoleVendor
cpe:/o:redhat:enterprise_linux:10.210.2—Red Hat
cpe:/o:redhat:enterprise_linux_eus:10.010.0—Red Hat
cpe:/o:redhat:rhel_els:66—Red Hat
cpe:/o:redhat:rhel_els:77—Red Hat
cpe:/o:redhat:enterprise_linux:8::baseos8—Red Hat
cpe:/o:redhat:rhel_aus:8.4::baseos8.4—Red Hat
cpe:/o:redhat:rhel_eus_long_life:8.4::baseos8.4—Red Hat
cpe:/o:redhat:rhel_aus:8.6::baseos8.6—Red Hat
cpe:/o:redhat:rhel_eus_long_life:8.6::baseos8.6—Red Hat
cpe:/o:redhat:rhel_e4s:8.8::baseos8.8—Red Hat
  • cpe:/o:redhat:enterprise_linux:10.2 Versions 10.2 — ·Red Hat
  • cpe:/o:redhat:enterprise_linux_eus:10.0 Versions 10.0 — ·Red Hat
  • cpe:/o:redhat:rhel_els:6 Versions 6 — ·Red Hat
  • cpe:/o:redhat:rhel_els:7 Versions 7 — ·Red Hat
  • cpe:/o:redhat:enterprise_linux:8::baseos Versions 8 — ·Red Hat
  • cpe:/o:redhat:rhel_aus:8.4::baseos Versions 8.4 — ·Red Hat
  • cpe:/o:redhat:rhel_eus_long_life:8.4::baseos Versions 8.4 — ·Red Hat
  • cpe:/o:redhat:rhel_aus:8.6::baseos Versions 8.6 — ·Red Hat
  • cpe:/o:redhat:rhel_eus_long_life:8.6::baseos Versions 8.6 — ·Red Hat
  • cpe:/o:redhat:rhel_e4s:8.8::baseos Versions 8.8 — ·Red Hat
Show 22 more CPE
CPEVersionsRoleVendor
cpe:/o:redhat:rhel_tus:8.8::baseos8.8—Red Hat
cpe:/a:redhat:enterprise_linux:9::appstream9—Red Hat
cpe:/o:redhat:enterprise_linux:9::baseos9—Red Hat
cpe:/a:redhat:rhel_e4s:9.2::appstream9.2—Red Hat
cpe:/o:redhat:rhel_e4s:9.2::baseos9.2—Red Hat
cpe:/a:redhat:rhel_e4s:9.4::appstream9.4—Red Hat
cpe:/o:redhat:rhel_e4s:9.4::baseos9.4—Red Hat
cpe:/a:redhat:rhel_eus:9.6::appstream9.6—Red Hat
cpe:/o:redhat:rhel_eus:9.6::baseos9.6—Red Hat
cpe:/a:redhat:openshift:4.12::el84.12—Red Hat
cpe:/a:redhat:openshift:4.13::el94.13—Red Hat
cpe:/a:redhat:openshift:4.14::el94.14—Red Hat
cpe:/a:redhat:openshift:4.15::el94.15—Red Hat
cpe:/a:redhat:openshift:4.16::el94.16—Red Hat
cpe:/a:redhat:openshift:4.17::el94.17—Red Hat
cpe:/a:redhat:openshift:4.18::el94.18—Red Hat
cpe:/a:redhat:openshift:4.19::el94.19—Red Hat
cpe:/a:redhat:openshift:4.20::el94.20—Red Hat
cpe:/a:redhat:openshift:4.21::el94.21—Red Hat
cpe:/a:redhat:openshift:4.22::el94.22—Red Hat
cpe:/a:redhat:hummingbird:11—Red Hat
cpe:/a:redhat:openshift:55—Red Hat
  • cpe:/o:redhat:rhel_tus:8.8::baseos Versions 8.8 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:9::appstream Versions 9 — ·Red Hat
  • cpe:/o:redhat:enterprise_linux:9::baseos Versions 9 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:9.2::appstream Versions 9.2 — ·Red Hat
  • cpe:/o:redhat:rhel_e4s:9.2::baseos Versions 9.2 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:9.4::appstream Versions 9.4 — ·Red Hat
  • cpe:/o:redhat:rhel_e4s:9.4::baseos Versions 9.4 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:9.6::appstream Versions 9.6 — ·Red Hat
  • cpe:/o:redhat:rhel_eus:9.6::baseos Versions 9.6 — ·Red Hat
  • cpe:/a:redhat:openshift:4.12::el8 Versions 4.12 — ·Red Hat
  • cpe:/a:redhat:openshift:4.13::el9 Versions 4.13 — ·Red Hat
  • cpe:/a:redhat:openshift:4.14::el9 Versions 4.14 — ·Red Hat
  • cpe:/a:redhat:openshift:4.15::el9 Versions 4.15 — ·Red Hat
  • cpe:/a:redhat:openshift:4.16::el9 Versions 4.16 — ·Red Hat
  • cpe:/a:redhat:openshift:4.17::el9 Versions 4.17 — ·Red Hat
  • cpe:/a:redhat:openshift:4.18::el9 Versions 4.18 — ·Red Hat
  • cpe:/a:redhat:openshift:4.19::el9 Versions 4.19 — ·Red Hat
  • cpe:/a:redhat:openshift:4.20::el9 Versions 4.20 — ·Red Hat
  • cpe:/a:redhat:openshift:4.21::el9 Versions 4.21 — ·Red Hat
  • cpe:/a:redhat:openshift:4.22::el9 Versions 4.22 — ·Red Hat
  • cpe:/a:redhat:hummingbird:1 Versions 1 — ·Red Hat
  • cpe:/a:redhat:openshift:5 Versions 5 — ·Red Hat

Remediation

Red Hat 26 advisories

  • RHSA-2026:90272 Released 2026-10-27 · Red Hat rating Critical
    OpenShift Container Platform 4.12.102 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 rhcos-x86_64-412.86.202610250235-0
  • RHSA-2026:79114 Released 2026-10-08 · Red Hat rating Important
    dracut security, bug fix, and enhancement update
    • Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION) dracut-004-414.el6_10, dracut-network-004-414.el6_10
  • RHSA-2026:70615 Released 2026-10-01 · Red Hat rating Important
    OpenShift Container Platform 4.18.56 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 rhcos-aarch64-418.94.202609171815-0, rhcos-ppc64le-418.94.202609171815-0, rhcos-s390x-418.94.202609171815-0 +1
Show 23 more Red Hat advisories
  • RHSA-2026:74499 Released 2026-10-01 · Red Hat rating Important
    dracut security update
    • Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION) dracut-004-413.el6_10, dracut-fips-004-413.el6_10, dracut-kernel-004-413.el6_10 +1
    • Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION) dracut-caps-004-413.el6_10, dracut-fips-aesni-004-413.el6_10, dracut-generic-004-413.el6_10 +1
  • RHSA-2026:70586 Released 2026-10-01 · Red Hat rating Important
    OpenShift Container Platform 4.17.58 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 rhcos-aarch64-417.94.202609191027-0, rhcos-ppc64le-417.94.202609191027-0, rhcos-s390x-417.94.202609191027-0 +1
  • RHSA-2026:67857 Released 2026-09-28 · Red Hat rating Important
    OpenShift Container Platform 4.15.69 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 rhcos-aarch64-415.92.202609140326-0, rhcos-ppc64le-415.92.202609140326-0, rhcos-s390x-415.92.202609140326-0 +1
  • RHSA-2026:69118 Released 2026-09-21 · Red Hat rating Important
    dracut security update
    • Red Hat Enterprise Linux BaseOS AUS (v.8.4) dracut-049-138.git20220131.el8_4.1, dracut-caps-049-138.git20220131.el8_4.1, dracut-config-generic-049-138.git20220131.el8_4.1 +5
    • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) dracut-049-138.git20220131.el8_4.1, dracut-caps-049-138.git20220131.el8_4.1, dracut-config-generic-049-138.git20220131.el8_4.1 +5
  • RHSA-2026:69119 Released 2026-09-21 · Red Hat rating Important
    dracut security update
    • Red Hat Enterprise Linux BaseOS AUS (v.8.6) dracut-049-203.git20220511.el8_6.1, dracut-caps-049-203.git20220511.el8_6.1, dracut-config-generic-049-203.git20220511.el8_6.1 +5
    • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) dracut-049-203.git20220511.el8_6.1, dracut-caps-049-203.git20220511.el8_6.1, dracut-config-generic-049-203.git20220511.el8_6.1 +5
  • RHSA-2026:65839 Released 2026-09-17 · Red Hat rating Important
    OpenShift Container Platform 4.13.71 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 rhcos-x86_64-413.92.202609080414-0
  • RHSA-2026:65851 Released 2026-09-17 · Red Hat rating Important
    OpenShift Container Platform 4.18.55 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 rhcos-aarch64-418.94.202609031320-0, rhcos-ppc64le-418.94.202609031320-0, rhcos-s390x-418.94.202609031320-0 +1
  • RHSA-2026:66357 Released 2026-09-15 · Red Hat rating Important
    OpenShift Container Platform 4.22.14 bug fix and security update
    • Red Hat OpenShift Container Platform 4.22 rhcos-aarch64-4.22.9.8.202609081748-0, rhcos-ppc64le-4.22.9.8.202609081748-0, rhcos-s390x-4.22.9.8.202609081748-0 +1
  • RHSA-2026:62409 Released 2026-09-14 · Red Hat rating Important
    OpenShift Container Platform 4.14.73 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 rhcos-aarch64-414.92.202609011250-0, rhcos-ppc64le-414.92.202609011250-0, rhcos-s390x-414.92.202609011250-0 +1
  • RHSA-2026:62549 Released 2026-09-10 · Red Hat rating Important
    OpenShift Container Platform 4.16.70 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 rhcos-aarch64-416.94.202609011112-0, rhcos-ppc64le-416.94.202609011112-0, rhcos-s390x-416.94.202609011112-0 +1
  • RHSA-2026:63044 Released 2026-09-09 · Red Hat rating Important
    OpenShift Container Platform 4.19.46 bug fix and security update
    • Red Hat OpenShift Container Platform 4.19 rhcos-aarch64-4.19.9.6.202609021231-0, rhcos-ppc64le-4.19.9.6.202609021231-0, rhcos-s390x-4.19.9.6.202609021231-0 +1
  • RHSA-2026:63041 Released 2026-09-08 · Red Hat rating Important
    OpenShift Container Platform 4.21.32 bug fix and security update
    • Red Hat OpenShift Container Platform 4.21 rhcos-aarch64-4.21.9.6.202609021100-0, rhcos-ppc64le-4.21.9.6.202609021100-0, rhcos-s390x-4.21.9.6.202609021100-0 +1
  • RHSA-2026:60445 Released 2026-09-01 · Red Hat rating Important
    OpenShift Container Platform 4.20.36 bug fix and security update
    • Red Hat OpenShift Container Platform 4.20 rhcos-aarch64-4.20.9.6.202608260604-0, rhcos-ppc64le-4.20.9.6.202608260604-0, rhcos-s390x-4.20.9.6.202608260604-0 +1
  • RHSA-2026:60440 Released 2026-09-01 · Red Hat rating Important
    OpenShift Container Platform 4.22.12 bug fix and security update
    • Red Hat OpenShift Container Platform 4.22 rhcos-aarch64-4.22.9.8.202608251819-0, rhcos-ppc64le-4.22.9.8.202608251819-0, rhcos-s390x-4.22.9.8.202608251819-0 +1
  • RHSA-2026:62269 Released 2026-09-01 · Red Hat rating Important
    dracut security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) dracut-033-577.el7_9, dracut-network-033-577.el7_9
  • RHSA-2026:61252 Released 2026-08-31 · Red Hat rating Important
    dracut security update
    • Red Hat Enterprise Linux BaseOS E4S (v.8.8) dracut-049-223.git20230119.el8_8.1, dracut-network-049-223.git20230119.el8_8.1
    • Red Hat Enterprise Linux BaseOS TUS (v.8.8) dracut-049-223.git20230119.el8_8.1, dracut-network-049-223.git20230119.el8_8.1
  • RHSA-2026:57772 Released 2026-08-20 · Red Hat rating Important
    dracut security update
    • Red Hat Enterprise Linux BaseOS EUS (v.9.6) dracut-057-89.git20250311.el9_6.1, dracut-network-057-89.git20250311.el9_6.1
  • RHSA-2026:57785 Released 2026-08-20 · Red Hat rating Important
    dracut security update
    • Red Hat Enterprise Linux BaseOS E4S (v.9.4) dracut-057-54.git20250423.el9_4.3, dracut-network-057-54.git20250423.el9_4.3
  • RHSA-2026:57775 Released 2026-08-20 · Red Hat rating Important
    dracut security update
    • Red Hat Enterprise Linux BaseOS E4S (v.9.2) dracut-057-25.git20250717.el9_2.2, dracut-network-057-25.git20250717.el9_2.2
  • RHSA-2026:57580 Released 2026-08-20 · Red Hat rating Important
    dracut security update
    • Red Hat Enterprise Linux BaseOS EUS (v. 10.0) dracut-105-4.el10_0.1, dracut-network-105-4.el10_0.1
  • RHSA-2026:54576 Released 2026-08-13 · Red Hat rating Important
    dracut security update
    • Red Hat Enterprise Linux AppStream (v. 10) dracut-caps-107-9.el10_2, dracut-live-107-9.el10_2
    • Red Hat Enterprise Linux BaseOS (v. 10) dracut-107-9.el10_2, dracut-config-generic-107-9.el10_2, dracut-config-rescue-107-9.el10_2 +3
  • RHSA-2026:54571 Released 2026-08-13 · Red Hat rating Important
    dracut security update
    • Red Hat Enterprise Linux AppStream (v. 9) dracut-caps-057-120.git20260728.el9_8, dracut-live-057-120.git20260728.el9_8
    • Red Hat Enterprise Linux BaseOS (v. 9) dracut-057-120.git20260728.el9_8, dracut-config-generic-057-120.git20260728.el9_8, dracut-config-rescue-057-120.git20260728.el9_8 +3
  • RHSA-2026:54575 Released 2026-08-13 · Red Hat rating Important
    dracut security update
    • Red Hat Enterprise Linux BaseOS (v. 8) dracut-049-246.git20260728.el8_10, dracut-caps-049-246.git20260728.el8_10, dracut-config-generic-049-246.git20260728.el8_10 +5

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8 and 4 more products — RHSA-2026:60440

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2026-50931 Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root loginPriority LOW 35
    Show all 2 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat OpenShift Container Platform 5AffectedNo fix yet
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:54576
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:54571
Red Hat Enterprise Linux BaseOS (v. 10)Fixed RHSA-2026:54576
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2026:54575
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2026:54571
Red Hat Enterprise Linux BaseOS AUS (v.8.4)Fixed RHSA-2026:69118
Red Hat Enterprise Linux BaseOS AUS (v.8.6)Fixed RHSA-2026:69119
Red Hat Enterprise Linux BaseOS E4S (v.8.8)Fixed RHSA-2026:61252
Red Hat Enterprise Linux BaseOS E4S (v.9.2)Fixed RHSA-2026:57775
Red Hat Enterprise Linux BaseOS E4S (v.9.4)Fixed RHSA-2026:57785
Red Hat Enterprise Linux BaseOS EUS (v. 10.0)Fixed RHSA-2026:57580
Red Hat Enterprise Linux BaseOS EUS (v.9.6)Fixed RHSA-2026:57772
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)Fixed RHSA-2026:69118
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)Fixed RHSA-2026:69119
Red Hat Enterprise Linux BaseOS TUS (v.8.8)Fixed RHSA-2026:61252
Red Hat Enterprise Linux Server (v. 7 ELS)Fixed RHSA-2026:62269
Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)Fixed RHSA-2026:74499, RHSA-2026:79114
Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)Fixed RHSA-2026:74499
Red Hat OpenShift Container Platform 4.12Fixed RHSA-2026:90272
Red Hat OpenShift Container Platform 4.13Fixed RHSA-2026:65839
Red Hat OpenShift Container Platform 4.14Fixed RHSA-2026:62409
Red Hat OpenShift Container Platform 4.15Fixed RHSA-2026:67857
Red Hat OpenShift Container Platform 4.16Fixed RHSA-2026:62549
Red Hat OpenShift Container Platform 4.17Fixed RHSA-2026:70586
Red Hat OpenShift Container Platform 4.18Fixed RHSA-2026:65851, RHSA-2026:70615
Red Hat OpenShift Container Platform 4.19Fixed RHSA-2026:63044
Red Hat OpenShift Container Platform 4.20Fixed RHSA-2026:60445
Red Hat OpenShift Container Platform 4.21Fixed RHSA-2026:63041
Red Hat OpenShift Container Platform 4.22Fixed RHSA-2026:60440, RHSA-2026:66357
Not affected: 15 products
  • Red Hat Enterprise Linux AppStream E4S (v.9.2)
  • Red Hat Enterprise Linux AppStream E4S (v.9.4)
  • Red Hat Enterprise Linux AppStream EUS (v. 10.0)
  • Red Hat Enterprise Linux AppStream EUS (v.9.6)
  • Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • Red Hat Enterprise Linux BaseOS E4S (v.9.4)
  • Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • Red Hat Enterprise Linux BaseOS EUS (v.9.6)
  • Red Hat Enterprise Linux BaseOS TUS (v.8.8)
  • Red Hat Enterprise Linux Server (v. 7 ELS)
  • Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)
  • Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)
  • Red Hat Hardened Images

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-15816
  2. 2026-10-03 Alias added: GHSA-8pxm-cr92-crx8
  3. 2026-10-08 Fix available: dracut@0:004-414.el6_10 · CNA
  4. 2026-10-08 1 new reference · CNA
  5. 2026-10-08 Fix available: openshift/[email protected], openshift/[email protected], openshift/[email protected] +9 · CNA
  6. 2026-10-09 Fix available: RHSA-2026:79114 · Red Hat
  7. 2026-10-09 Affected versions changed · Red Hat
  8. 2026-10-27 Fix available: openshift/[email protected] · CNA
  9. 2026-10-27 1 new reference · CNA
  10. 2026-10-27 Fix available: Red Hat OpenShift Container Platform 4.12 · Red Hat
  11. 2026-10-29 Fix available: RHSA-2026:90272 · Red Hat
  12. 2026-10-30 Affected versions changed · CNA
  13. 2026-10-30 Affected versions changed · Red Hat

References

Advisory 26

Other 5

  • TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
  • TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
  • TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
  • TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
  • TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
See all 7413 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences