CVE-2026-6893
dracut: A flaw was found in dracut
CVE-2026-6893 is fixed in 12 products on 1 platform, first by DEBIAN-CVE-2026-6893, released June 10, 2026. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
7.5
high
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0128
70th percentile
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| dracut · Debian 14 | 112-1 | DEBIAN-CVE-2026-6893 | Jun 10, 2026 |
| dracut · RHEL 10 | 105-4.el10_0.1 | RHSA-2026:57580 | Jun 24, 2026 |
| dracut · RHEL 8 | 0:049-244.git20260529.el8_10 | RHSA-2026:26534 | Jun 24, 2026 |
| dracut · RHEL 9 | 0:057-115.git20260527.el9_8 | RHSA-2026:26533 | Jun 24, 2026 |
| dracut · Ubuntu 18.04.6 LTS (bionic) | 047-2ubuntu0.1~esm1 | dracut 047-2ubuntu0.1~esm1 | Aug 7, 2026 |
| dracut · Ubuntu 20.04 LTS (focal) | 048+80-2ubuntu0.1~esm1 | dracut 048+80-2ubuntu0.1~esm1 | Aug 7, 2026 |
| dracut · Ubuntu 22.04.1 LTS (jammy) | 051-1ubuntu0.1~esm1 | dracut 051-1ubuntu0.1~esm1 | Aug 7, 2026 |
| dracut · Ubuntu 24.04.5 LTS (noble) | 060+5-1ubuntu3.4 | dracut 060+5-1ubuntu3.4 | Aug 7, 2026 |
| dracut · almalinux 10 | 107-7.el10_2 | ALSA-2026:26532 | Jun 17, 2026 |
| dracut · almalinux 8 | 049-244.git20260529.el8_10 | ALSA-2026:26534 | Jun 17, 2026 |
| dracut · almalinux 9 | 057-115.git20260527.el9_8 | ALSA-2026:26533 | Jun 17, 2026 |
| dracut · amzn 2023 | 102-3.amzn2023.0.3 | ALAS2023-2026-1965 | Jul 20, 2026 |
| dracut · ol 10 | 0:107-8.0.1.el10_2 | ELSA-2026-26532 | Jul 20, 2026 |
| dracut · ol 8 | 0:049-244.git20260529.0.1.el8_10 | ELSA-2026-26534 | Jun 17, 2026 |
| dracut · ol 9 | 0:057-115.git20260527.0.1.el9_8 | ELSA-2026-26533 | Jun 24, 2026 |
| dracut · opensuse-leap 16.0 | 059+suse.730.g73d3411aa-160000.1.1 | OPENSUSE-SU-2026:21749-1 | Sep 3, 2026 |
| dracut · rocky 10 | 0:107-7.el10_2 | RLSA-2026:26532 | Jun 19, 2026 |
| dracut · rocky 8 | 0:049-244.git20260529.el8_10 | RLSA-2026:26534 | Jun 19, 2026 |
| dracut · rocky 9 | 0:057-115.git20260527.el9_8 | RLSA-2026:26533 | Jun 19, 2026 |
| dracut · sles 15.6 | 059+suse.571.g3d42218af-150600.3.35.1 | SUSE-SU-2026:3997-1 | Sep 7, 2026 |
| dracut · sles 15.7 | 059+suse.576.g72b98359a-150700.3.23.1 | SUSE-SU-2026:3931-1 | Sep 3, 2026 |
| dracut · sles 16.0 | 059+suse.730.g73d3411aa-160000.1.1 | SUSE-SU-2026:23614-1 | Sep 3, 2026 |
| dracut-caps · RHEL 8 | 0:049-244.git20260529.el8_10 | RHSA-2026:26534 | Jun 24, 2026 |
| dracut-caps · RHEL 9 | 0:057-115.git20260527.el9_8 | RHSA-2026:26533 | Jun 24, 2026 |
| dracut-caps · almalinux 10 | 107-7.el10_2 | ALSA-2026:26532 | Jun 17, 2026 |
| dracut-caps · almalinux 8 | 049-244.git20260529.el8_10 | ALSA-2026:26534 | Jun 17, 2026 |
| dracut-caps · almalinux 9 | 057-115.git20260527.el9_8 | ALSA-2026:26533 | Jun 17, 2026 |
| dracut-caps · amzn 2023 | 102-3.amzn2023.0.3 | ALAS2023-2026-1965 | Jul 20, 2026 |
| dracut-caps · ol 10 | 0:107-8.0.1.el10_2 | ELSA-2026-26532 | Jul 20, 2026 |
| dracut-caps · ol 8 | 0:049-244.git20260529.0.1.el8_10 | ELSA-2026-26534 | Jun 17, 2026 |
| dracut-caps · ol 9 | 0:057-115.git20260527.0.1.el9_8 | ELSA-2026-26533 | Jun 24, 2026 |
| dracut-config-generic · RHEL 8 | 0:049-244.git20260529.el8_10 | RHSA-2026:26534 | Jun 24, 2026 |
| dracut-config-generic · RHEL 9 | 0:057-115.git20260527.el9_8 | RHSA-2026:26533 | Jun 24, 2026 |
| dracut-config-generic · Ubuntu 18.04.6 LTS (bionic) | 047-2ubuntu0.1~esm1 | dracut-config-generic 047-2ubuntu0.1~esm1 | Aug 7, 2026 |
| dracut-config-generic · Ubuntu 20.04 LTS (focal) | 048+80-2ubuntu0.1~esm1 | dracut-config-generic 048+80-2ubuntu0.1~esm1 | Aug 7, 2026 |
| dracut-config-generic · Ubuntu 22.04.1 LTS (jammy) | 051-1ubuntu0.1~esm1 | dracut-config-generic 051-1ubuntu0.1~esm1 | Aug 7, 2026 |
| dracut-config-generic · Ubuntu 24.04.5 LTS (noble) | 060+5-1ubuntu3.4 | dracut-config-generic 060+5-1ubuntu3.4 | Aug 7, 2026 |
| dracut-config-generic · almalinux 10 | 107-7.el10_2 | ALSA-2026:26532 | Jun 17, 2026 |
| dracut-config-generic · almalinux 8 | 049-244.git20260529.el8_10 | ALSA-2026:26534 | Jun 17, 2026 |
| dracut-config-generic · almalinux 9 | 057-115.git20260527.el9_8 | ALSA-2026:26533 | Jun 17, 2026 |
| dracut-config-generic · amzn 2023 | 102-3.amzn2023.0.3 | ALAS2023-2026-1965 | Jul 20, 2026 |
| dracut-config-generic · ol 10 | 0:107-8.0.1.el10_2 | ELSA-2026-26532 | Jul 20, 2026 |
| dracut-config-generic · ol 8 | 0:049-244.git20260529.0.1.el8_10 | ELSA-2026-26534 | Jun 17, 2026 |
| dracut-config-generic · ol 9 | 0:057-115.git20260527.0.1.el9_8 | ELSA-2026-26533 | Jun 24, 2026 |
| dracut-config-rescue · RHEL 8 | 0:049-244.git20260529.el8_10 | RHSA-2026:26534 | Jun 24, 2026 |
| dracut-config-rescue · RHEL 9 | 0:057-115.git20260527.el9_8 | RHSA-2026:26533 | Jun 24, 2026 |
| dracut-config-rescue · Ubuntu 18.04.6 LTS (bionic) | 047-2ubuntu0.1~esm1 | dracut-config-rescue 047-2ubuntu0.1~esm1 | Aug 7, 2026 |
| dracut-config-rescue · Ubuntu 20.04 LTS (focal) | 048+80-2ubuntu0.1~esm1 | dracut-config-rescue 048+80-2ubuntu0.1~esm1 | Aug 7, 2026 |
| dracut-config-rescue · Ubuntu 22.04.1 LTS (jammy) | 051-1ubuntu0.1~esm1 | dracut-config-rescue 051-1ubuntu0.1~esm1 | Aug 7, 2026 |
| dracut-config-rescue · Ubuntu 24.04.5 LTS (noble) | 060+5-1ubuntu3.4 | dracut-config-rescue 060+5-1ubuntu3.4 | Aug 7, 2026 |
| dracut-config-rescue · almalinux 10 | 107-7.el10_2 | ALSA-2026:26532 | Jun 17, 2026 |
| dracut-config-rescue · almalinux 8 | 049-244.git20260529.el8_10 | ALSA-2026:26534 | Jun 17, 2026 |
| dracut-config-rescue · almalinux 9 | 057-115.git20260527.el9_8 | ALSA-2026:26533 | Jun 17, 2026 |
| dracut-config-rescue · amzn 2023 | 102-3.amzn2023.0.3 | ALAS2023-2026-1965 | Jul 20, 2026 |
| dracut-config-rescue · ol 10 | 0:107-8.0.1.el10_2 | ELSA-2026-26532 | Jul 20, 2026 |
| dracut-config-rescue · ol 8 | 0:049-244.git20260529.0.1.el8_10 | ELSA-2026-26534 | Jun 17, 2026 |
| dracut-config-rescue · ol 9 | 0:057-115.git20260527.0.1.el9_8 | ELSA-2026-26533 | Jun 24, 2026 |
| dracut-core · Ubuntu 18.04.6 LTS (bionic) | 047-2ubuntu0.1~esm1 | dracut-core 047-2ubuntu0.1~esm1 | Aug 7, 2026 |
| dracut-core · Ubuntu 20.04 LTS (focal) | 048+80-2ubuntu0.1~esm1 | dracut-core 048+80-2ubuntu0.1~esm1 | Aug 7, 2026 |
| dracut-core · Ubuntu 22.04.1 LTS (jammy) | 051-1ubuntu0.1~esm1 | dracut-core 051-1ubuntu0.1~esm1 | Aug 7, 2026 |
| dracut-core · Ubuntu 24.04.5 LTS (noble) | 060+5-1ubuntu3.4 | dracut-core 060+5-1ubuntu3.4 | Aug 7, 2026 |
| dracut-debuginfo · amzn 2023 | 102-3.amzn2023.0.3 | ALAS2023-2026-1965 | Jul 20, 2026 |
| dracut-debugsource · amzn 2023 | 102-3.amzn2023.0.3 | ALAS2023-2026-1965 | Jul 20, 2026 |
| dracut-install · Ubuntu 24.04.5 LTS (noble) | 060+5-1ubuntu3.4 | dracut-install 060+5-1ubuntu3.4 | Aug 7, 2026 |
| dracut-live · RHEL 8 | 0:049-244.git20260529.el8_10 | RHSA-2026:26534 | Jun 24, 2026 |
| dracut-live · RHEL 9 | 0:057-115.git20260527.el9_8 | RHSA-2026:26533 | Jun 24, 2026 |
| dracut-live · Ubuntu 22.04.1 LTS (jammy) | 051-1ubuntu0.1~esm1 | dracut-live 051-1ubuntu0.1~esm1 | Aug 7, 2026 |
| dracut-live · Ubuntu 24.04.5 LTS (noble) | 060+5-1ubuntu3.4 | dracut-live 060+5-1ubuntu3.4 | Aug 7, 2026 |
| dracut-live · almalinux 10 | 107-7.el10_2 | ALSA-2026:26532 | Jun 17, 2026 |
| dracut-live · almalinux 8 | 049-244.git20260529.el8_10 | ALSA-2026:26534 | Jun 17, 2026 |
| dracut-live · almalinux 9 | 057-115.git20260527.el9_8 | ALSA-2026:26533 | Jun 17, 2026 |
| dracut-live · ol 10 | 0:107-8.0.1.el10_2 | ELSA-2026-26532 | Jul 20, 2026 |
| dracut-live · ol 8 | 0:049-244.git20260529.0.1.el8_10 | ELSA-2026-26534 | Jun 17, 2026 |
| dracut-live · ol 9 | 0:057-115.git20260527.0.1.el9_8 | ELSA-2026-26533 | Jun 24, 2026 |
| dracut-network · RHEL 8 | 0:049-244.git20260529.el8_10 | RHSA-2026:26534 | Jun 24, 2026 |
| dracut-network · RHEL 9 | 0:057-115.git20260527.el9_8 | RHSA-2026:26533 | Jun 24, 2026 |
| dracut-network · Ubuntu 18.04.6 LTS (bionic) | 047-2ubuntu0.1~esm1 | dracut-network 047-2ubuntu0.1~esm1 | Aug 7, 2026 |
| dracut-network · Ubuntu 20.04 LTS (focal) | 048+80-2ubuntu0.1~esm1 | dracut-network 048+80-2ubuntu0.1~esm1 | Aug 7, 2026 |
| dracut-network · Ubuntu 22.04.1 LTS (jammy) | 051-1ubuntu0.1~esm1 | dracut-network 051-1ubuntu0.1~esm1 | Aug 7, 2026 |
| dracut-network · Ubuntu 24.04.5 LTS (noble) | 060+5-1ubuntu3.4 | dracut-network 060+5-1ubuntu3.4 | Aug 7, 2026 |
| dracut-network · almalinux 10 | 107-7.el10_2 | ALSA-2026:26532 | Jun 17, 2026 |
| dracut-network · almalinux 8 | 049-244.git20260529.el8_10 | ALSA-2026:26534 | Jun 17, 2026 |
| dracut-network · almalinux 9 | 057-115.git20260527.el9_8 | ALSA-2026:26533 | Jun 17, 2026 |
| dracut-network · ol 10 | 0:107-8.0.1.el10_2 | ELSA-2026-26532 | Jul 20, 2026 |
| dracut-network · ol 8 | 0:049-244.git20260529.0.1.el8_10 | ELSA-2026-26534 | Jun 17, 2026 |
| dracut-network · ol 9 | 0:057-115.git20260527.0.1.el9_8 | ELSA-2026-26533 | Jun 24, 2026 |
| dracut-squash · RHEL 8 | 0:049-244.git20260529.el8_10 | RHSA-2026:26534 | Jun 24, 2026 |
| dracut-squash · RHEL 9 | 0:057-115.git20260527.el9_8 | RHSA-2026:26533 | Jun 24, 2026 |
| dracut-squash · Ubuntu 22.04.1 LTS (jammy) | 051-1ubuntu0.1~esm1 | dracut-squash 051-1ubuntu0.1~esm1 | Aug 7, 2026 |
| dracut-squash · Ubuntu 24.04.5 LTS (noble) | 060+5-1ubuntu3.4 | dracut-squash 060+5-1ubuntu3.4 | Aug 7, 2026 |
| dracut-squash · almalinux 10 | 107-7.el10_2 | ALSA-2026:26532 | Jun 17, 2026 |
| dracut-squash · almalinux 8 | 049-244.git20260529.el8_10 | ALSA-2026:26534 | Jun 17, 2026 |
| dracut-squash · almalinux 9 | 057-115.git20260527.el9_8 | ALSA-2026:26533 | Jun 17, 2026 |
| dracut-squash · amzn 2023 | 102-3.amzn2023.0.3 | ALAS2023-2026-1965 | Jul 20, 2026 |
| dracut-squash · ol 10 | 0:107-8.0.1.el10_2 | ELSA-2026-26532 | Jul 20, 2026 |
| dracut-squash · ol 8 | 0:049-244.git20260529.0.1.el8_10 | ELSA-2026-26534 | Jun 17, 2026 |
| dracut-squash · ol 9 | 0:057-115.git20260527.0.1.el9_8 | ELSA-2026-26533 | Jun 24, 2026 |
| dracut-tools · RHEL 8 | 0:049-244.git20260529.el8_10 | RHSA-2026:26534 | Jun 24, 2026 |
| dracut-tools · RHEL 9 | 0:057-115.git20260527.el9_8 | RHSA-2026:26533 | Jun 24, 2026 |
| dracut-tools · almalinux 10 | 107-7.el10_2 | ALSA-2026:26532 | Jun 17, 2026 |
| dracut-tools · almalinux 8 | 049-244.git20260529.el8_10 | ALSA-2026:26534 | Jun 17, 2026 |
| dracut-tools · almalinux 9 | 057-115.git20260527.el9_8 | ALSA-2026:26533 | Jun 17, 2026 |
| dracut-tools · amzn 2023 | 102-3.amzn2023.0.3 | ALAS2023-2026-1965 | Jul 20, 2026 |
| dracut-tools · ol 10 | 0:107-8.0.1.el10_2 | ELSA-2026-26532 | Jul 20, 2026 |
| dracut-tools · ol 8 | 0:049-244.git20260529.0.1.el8_10 | ELSA-2026-26534 | Jun 17, 2026 |
| dracut-tools · ol 9 | 0:057-115.git20260527.0.1.el9_8 | ELSA-2026-26533 | Jun 24, 2026 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.