A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are improperly handled and written into a temporary shell script without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs during system boot.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat_linux | — | Upgrade dracut-config-rescueUpgrade dracut-networkUpgrade dracut-liveUpgrade dracut-toolsUpgrade dracut-capsUpgrade dracut-debuginfoUpgrade dracutUpgrade dracut-debugsourceUpgrade dracut-squashUpgrade dracut-config-generic | Sep 21, 2026 | Jul 21, 2026 |
| Ubuntu | — | Upgrade dracut-coreUpgrade dracut-network (Ubuntu Pro)Upgrade dracut-core (Ubuntu Pro)No solution existsUpgrade dracut (Ubuntu Pro)Upgrade dracut-networkUpgrade dracut | Sep 29, 2026 | Sep 28, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub