VDB

RHSA-2026:57785

RHSA-2026:57785 PUBLISHED CVSS 7.5 HIGH

A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Red Hatdracut-0:057-54.git20250423.el9_4.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)4.3
Red Hatdracut-caps-0:057-54.git20250423.el9_4.3.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)4.3
Red Hatdracut-network-0:057-54.git20250423.el9_4.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)4.3
Red Hatdracut-config-generic-0:057-54.git20250423.el9_4.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)4.3
Red Hatdracut-tools-0:057-54.git20250423.el9_4.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)4.3
Red Hatdracut-tools-0:057-54.git20250423.el9_4.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)4.3
Red Hatdracut-network-0:057-54.git20250423.el9_4.3.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)4.3
Red Hatdracut-debuginfo-0:057-54.git20250423.el9_4.3.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)4.3
Red Hatdracut-network-0:057-54.git20250423.el9_4.3.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)4.3
Red Hatdracut-debugsource-0:057-54.git20250423.el9_4.3.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)4.3
Red Hatdracut-debuginfo-0:057-54.git20250423.el9_4.3.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)4.3
Red Hatdracut-config-generic-0:057-54.git20250423.el9_4.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)4.3
Red Hatdracut-0:057-54.git20250423.el9_4.3.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)4.3
Red Hatdracut-live-0:057-54.git20250423.el9_4.3.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)4.3
Red Hatdracut-config-generic-0:057-54.git20250423.el9_4.3.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)4.3
Red Hatdracut-tools-0:057-54.git20250423.el9_4.3.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)4.3
Red Hatdracut-config-rescue-0:057-54.git20250423.el9_4.3.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)4.3
Red Hatdracut-debuginfo-0:057-54.git20250423.el9_4.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)4.3
Red Hatdracut-network-0:057-54.git20250423.el9_4.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.4)4.3
Red Hatdracut-caps-0:057-54.git20250423.el9_4.3.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)4.3

…and 29 more

Timeline

  • Aug 20, 2026 CVE Published
  • Sep 1, 2026 CVE Updated
  • Sep 1, 2026 Distribution Patch
  • Sep 1, 2026 Distribution Patch
  • Sep 1, 2026 Security Advisory
  • Sep 1, 2026 Security Advisory
  • Sep 1, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›