VDB
CVE-2026-16445
CVE-2026-16445
PUBLISHED
CVSS 7.5 HIGH
Reported by redhat · Published July 21, 2026
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP options, such as a malicious root-path, next-server, or bootfile name, to a system using dracut's NetworkManager-based initrd network module. These options are improperly handled and written into a temporary shell script without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs during system boot.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux 8 | 0:049-244.git20260529.el8_10 |
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | 0:049-223.git20230119.el8_8.1 |
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | 0:049-223.git20230119.el8_8.1 |
| Red Hat | Red Hat Hardened Images | 109-7.hum1 |
| Red Hat | Red Hat Enterprise Linux 10 | |
| Red Hat | Red Hat Enterprise Linux 6 | |
| Red Hat | Red Hat Enterprise Linux 7 | |
| Red Hat | Red Hat Enterprise Linux 9 | |
| Red Hat | Red Hat OpenShift Container Platform 4 | |
| Red Hat | Red Hat OpenShift Container Platform 4 | |
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | 0:049-223.git20230119.el8_8.1 |
| Red Hat | Red Hat Enterprise Linux 6 | |
| Red Hat | Red Hat Enterprise Linux 10 | |
| Red Hat | Red Hat Enterprise Linux 9 | |
| Red Hat | Red Hat Enterprise Linux 8 | 0:049-244.git20260529.el8_10, 0:049-244.git20260529.el8_10, 0:049-244.git20260529.el8_10 |
| Red Hat | Red Hat Enterprise Linux 7 | |
| Red Hat | Red Hat Hardened Images | 109-7.hum1, 109-7.hum1, 109-7.hum1 |
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | 0:049-223.git20230119.el8_8.1 |
Timeline
- Jul 21, 2026 Coalition ESS Score
- Jul 21, 2026 CVE Published
- Aug 7, 2026 EPSS Score
- Aug 24, 2026 EPSS Score
- Aug 25, 2026 Security Advisory
- Aug 31, 2026 CVE Updated
- Aug 31, 2026 Distribution Patch
- Aug 31, 2026 Security Advisory
- Sep 1, 2026 Distribution Patch
- Sep 1, 2026 Distribution Patch
- Sep 1, 2026 Security Advisory
- Sep 1, 2026 Security Advisory
References
- RHSA-2026:26534 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:40700 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:61252 vendor-advisoryx_refsource_REDHAT
- vdb-entryx_refsource_REDHAT
- RHBZ#2503147 issue-trackingx_refsource_REDHAT