High
Dracut: dracut: root code execution via dhcp options command injection
Type: advisorySources: Official CVE List
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.
- Products
- Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.6 Extended Update Support, Red Hat Hardened Images, Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.13, Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift Container Platform 4.15, Red Hat OpenShift Container Platform 4.16, Red Hat OpenShift Container Platform 4.17, Red Hat OpenShift Container Platform 4.18, Red Hat OpenShift Container Platform 4.19
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2026-6893
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 16:31 UTC · Revision 2
Source evidence
Dracut: dracut: root code execution via dhcp options command injection
core-cve · Original sourcePublished 10 Jun 2026, 19:49 UTC
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.
cve:CVE-2026-6893
Red Hat Enterprise Linux 10
Fixed versions: Not specified
Red Hat Enterprise Linux 10.0 Extended Update Support
Fixed versions: Not specified
Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
Fixed versions: Not specified
Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
Fixed versions: Not specified
Red Hat Enterprise Linux 7 Extended Lifecycle Support
Fixed versions: Not specified
Red Hat Enterprise Linux 8
Fixed versions: Not specified
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Fixed versions: Not specified
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Fixed versions: Not specified
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Fixed versions: Not specified
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Fixed versions: Not specified
Red Hat Enterprise Linux 8.8 Telecommunications Update Service
Fixed versions: Not specified
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Fixed versions: Not specified
Red Hat Enterprise Linux 9
Fixed versions: Not specified
Red Hat Enterprise Linux 9
Fixed versions: Not specified
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Fixed versions: Not specified
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Fixed versions: Not specified
Red Hat Enterprise Linux 9.6 Extended Update Support
Fixed versions: Not specified
Red Hat OpenShift Container Platform 4.12
Fixed versions: Not specified
Red Hat OpenShift Container Platform 4.13
Fixed versions: Not specified
Red Hat OpenShift Container Platform 4.14
Fixed versions: Not specified
Red Hat OpenShift Container Platform 4.15
Fixed versions: Not specified
Red Hat OpenShift Container Platform 4.16
Fixed versions: Not specified
Red Hat OpenShift Container Platform 4.17
Fixed versions: Not specified
Red Hat OpenShift Container Platform 4.18
Fixed versions: Not specified
Red Hat OpenShift Container Platform 4.18
Fixed versions: Not specified
Red Hat OpenShift Container Platform 4.19
Fixed versions: Not specified
Red Hat Hardened Images
Fixed versions: Not specified
Complete source record
{
"id": "c878e142279ba5c7492c5373df780dfb8b71484bd48d68bd595d75b2693b1d4e",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6893",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Dracut: dracut: root code execution via dhcp options command injection",
"summary": "A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.",
"evidence": "cve:CVE-2026-6893",
"products": [
{
"name": {
"value": "Red Hat Enterprise Linux 10",
"evidence": "/containers/cna/affected/0/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"evidence": "/containers/cna/affected/1/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION",
"evidence": "/containers/cna/affected/2/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION",
"evidence": "/containers/cna/affected/3/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
"evidence": "/containers/cna/affected/4/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat Enterprise Linux 8",
"evidence": "/containers/cna/affected/5/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
"evidence": "/containers/cna/affected/6/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
"evidence": "/containers/cna/affected/7/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
"evidence": "/containers/cna/affected/8/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
"evidence": "/containers/cna/affected/9/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"evidence": "/containers/cna/affected/10/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"evidence": "/containers/cna/affected/11/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat Enterprise Linux 9",
"evidence": "/containers/cna/affected/12/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat Enterprise Linux 9",
"evidence": "/containers/cna/affected/13/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"evidence": "/containers/cna/affected/14/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"evidence": "/containers/cna/affected/15/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"evidence": "/containers/cna/affected/16/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat OpenShift Container Platform 4.12",
"evidence": "/containers/cna/affected/17/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat OpenShift Container Platform 4.13",
"evidence": "/containers/cna/affected/18/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat OpenShift Container Platform 4.14",
"evidence": "/containers/cna/affected/19/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat OpenShift Container Platform 4.15",
"evidence": "/containers/cna/affected/20/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat OpenShift Container Platform 4.16",
"evidence": "/containers/cna/affected/21/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat OpenShift Container Platform 4.17",
"evidence": "/containers/cna/affected/22/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat OpenShift Container Platform 4.18",
"evidence": "/containers/cna/affected/23/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat OpenShift Container Platform 4.18",
"evidence": "/containers/cna/affected/24/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat OpenShift Container Platform 4.19",
"evidence": "/containers/cna/affected/25/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
},
{
"name": {
"value": "Red Hat Hardened Images",
"evidence": "/containers/cna/affected/26/product"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": []
}
],
"severity": "high",
"structured": {
"id": "CVE-2026-6893",
"aliases": [
"CVE-2026-6893"
],
"metrics": [
{
"other": {
"type": "Red Hat severity rating",
"content": {
"value": "Important",
"namespace": "https://access.redhat.com/security/updates/classification/"
}
}
},
{
"format": "CVSS",
"cvssV3_1": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.5,
"attackVector": "ADJACENT_NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "HIGH",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
}
}
],
"affected": [
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 10",
"versions": [
{
"status": "unaffected",
"version": "0:107-7.el10_2",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "dracut",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"versions": [
{
"status": "unaffected",
"version": "0:105-4.el10_0.1",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "dracut",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:rhel_els:6"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION",
"versions": [
{
"status": "unaffected",
"version": "0:004-413.el6_10",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "dracut",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:rhel_els:6"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION",
"versions": [
{
"status": "unaffected",
"version": "0:004-414.el6_10",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "dracut",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:rhel_els:7"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
"versions": [
{
"status": "unaffected",
"version": "0:033-577.el7_9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "dracut",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8",
"versions": [
{
"status": "unaffected",
"version": "0:049-244.git20260529.el8_10",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "dracut",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:rhel_aus:8.4::baseos",
"cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
"versions": [
{
"status": "unaffected",
"version": "0:049-138.git20220131.el8_4.1",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "dracut",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:rhel_aus:8.4::baseos",
"cpe:/o:redhat:rhel_eus_long_life:8.4::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
"versions": [
{
"status": "unaffected",
"version": "0:049-138.git20220131.el8_4.1",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "dracut",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:rhel_aus:8.6::baseos",
"cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
"versions": [
{
"status": "unaffected",
"version": "0:049-203.git20220511.el8_6.1",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "dracut",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:rhel_aus:8.6::baseos",
"cpe:/o:redhat:rhel_eus_long_life:8.6::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On",
"versions": [
{
"status": "unaffected",
"version": "0:049-203.git20220511.el8_6.1",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "dracut",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:rhel_e4s:8.8::baseos",
"cpe:/o:redhat:rhel_tus:8.8::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"versions": [
{
"status": "unaffected",
"version": "0:049-223.git20230119.el8_8.1",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "dracut",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:rhel_e4s:8.8::baseos",
"cpe:/o:redhat:rhel_tus:8.8::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"versions": [
{
"status": "unaffected",
"version": "0:049-223.git20230119.el8_8.1",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "dracut",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream",
"cpe:/o:redhat:enterprise_linux:9::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9",
"versions": [
{
"status": "unaffected",
"version": "0:057-115.git20260527.el9_8",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "dracut",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream",
"cpe:/o:redhat:enterprise_linux:9::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9",
"versions": [
{
"status": "unaffected",
"version": "0:057-115.git20260527.el9_8",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "dracut",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2::appstream",
"cpe:/o:redhat:rhel_e4s:9.2::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"versions": [
{
"status": "unaffected",
"version": "0:057-25.git20250717.el9_2.2",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "dracut",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4::appstream",
"cpe:/o:redhat:rhel_e4s:9.4::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"versions": [
{
"status": "unaffected",
"version": "0:057-54.git20250423.el9_4.3",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "dracut",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6::appstream",
"cpe:/o:redhat:rhel_eus:9.6::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"versions": [
{
"status": "unaffected",
"version": "0:057-89.git20250311.el9_6.1",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "dracut",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.12::el8"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.12",
"versions": [
{
"status": "unaffected",
"version": "412.86.202610250235-0",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift/ose-rhel-coreos-8",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.13::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.13",
"versions": [
{
"status": "unaffected",
"version": "413.92.202609080414-0",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift/ose-rhel-coreos-9",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.14::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.14",
"versions": [
{
"status": "unaffected",
"version": "414.92.202609011250-0",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift/ose-rhel-coreos-9",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.15::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.15",
"versions": [
{
"status": "unaffected",
"version": "415.92.202609140326-0",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift/ose-rhel-coreos-9",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.16::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.16",
"versions": [
{
"status": "unaffected",
"version": "416.94.202609011112-0",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift/ose-rhel-coreos-9",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.17::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.17",
"versions": [
{
"status": "unaffected",
"version": "417.94.202609191027-0",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift/ose-rhel-coreos-9",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "418.94.202609031320-0",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift/ose-rhel-coreos-9",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "418.94.202609171815-0",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift/ose-rhel-coreos-9",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.19",
"versions": [
{
"status": "unaffected",
"version": "4.19.9.6.202609021231-0",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift/ose-rhel-coreos-9",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"vendor": "Red Hat",
"product": "Red Hat Hardened Images",
"versions": [
{
"status": "unaffected",
"version": "109-6.hum1",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "dracut-main",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
}
],
"modified": "2026-10-27T21:54:51.100Z",
"provider": "cve",
"references": [
"https://access.redhat.com/errata/RHSA-2026:26532",
"https://access.redhat.com/errata/RHSA-2026:26533",
"https://access.redhat.com/errata/RHSA-2026:26534",
"https://access.redhat.com/errata/RHSA-2026:26713",
"https://access.redhat.com/errata/RHSA-2026:57580",
"https://access.redhat.com/errata/RHSA-2026:57772",
"https://access.redhat.com/errata/RHSA-2026:57775",
"https://access.redhat.com/errata/RHSA-2026:57785",
"https://access.redhat.com/errata/RHSA-2026:61252",
"https://access.redhat.com/errata/RHSA-2026:62269",
"https://access.redhat.com/errata/RHSA-2026:62409",
"https://access.redhat.com/errata/RHSA-2026:62549",
"https://access.redhat.com/errata/RHSA-2026:63044",
"https://access.redhat.com/errata/RHSA-2026:65839",
"https://access.redhat.com/errata/RHSA-2026:65851",
"https://access.redhat.com/errata/RHSA-2026:67857",
"https://access.redhat.com/errata/RHSA-2026:69118",
"https://access.redhat.com/errata/RHSA-2026:69119",
"https://access.redhat.com/errata/RHSA-2026:70586",
"https://access.redhat.com/errata/RHSA-2026:70615",
"https://access.redhat.com/errata/RHSA-2026:74499",
"https://access.redhat.com/errata/RHSA-2026:79114",
"https://access.redhat.com/errata/RHSA-2026:90272",
"https://access.redhat.com/security/cve/CVE-2026-6893",
"https://bugzilla.redhat.com/show_bug.cgi?id=2459963"
],
"provider_metadata": {
"adp": [
{
"title": "CISA ADP Vulnrichment",
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"id": "CVE-2026-6893",
"role": "CISA Coordinator",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"version": "2.0.3",
"timestamp": "2026-06-12T12:29:45.330884Z"
}
}
}
],
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-06-12T12:29:59.346Z"
}
},
{
"title": "dracut: dracut: Root code execution via DHCP options command injection",
"metrics": [
{
"other": {
"type": "Red Hat severity rating",
"content": {
"value": "Important",
"namespace": "https://access.redhat.com/security/updates/classification/"
}
}
},
{
"format": "CVSS",
"cvssV3_1": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.5,
"attackVector": "ADJACENT_NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "HIGH",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
}
}
],
"affected": [
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 10",
"versions": [
{
"status": "unaffected",
"version": "0:107-7.el10_2",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "dracut",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"versions": [
{
"status": "unaffected",
"version": "0:105-4.el10_0.1",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "dracut",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:rhel_els:7"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
"versions": [
{
"status": "unaffected",
"version": "0:033-577.el7_9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "dracut",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8",
"versions": [
{
"status": "unaffected",
"version": "0:049-244.git20260529.el8_10",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "dracut",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:rhel_tus:8.8"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"versions": [
{
"status": "unaffected",
"version": "0:049-223.git20230119.el8_8.1",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "dracut",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:rhel_e4s:8.8"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"versions": [
{
"status": "unaffected",
"version": "0:049-223.git20230119.el8_8.1",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "dracut",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:9",
"cpe:/o:redhat:enterprise_linux:9"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9",
"versions": [
{
"status": "unaffected",
"version": "0:057-115.git20260527.el9_8",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "dracut",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"versions": [
{
"status": "unaffected",
"version": "0:057-25.git20250717.el9_2.2",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "dracut",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"versions": [
{
"status": "unaffected",
"version": "0:057-54.git20250423.el9_4.3",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "dracut",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"versions": [
{
"status": "unaffected",
"version": "0:057-89.git20250311.el9_6.1",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "dracut",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.13::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.13",
"versions": [
{
"status": "unaffected",
"version": "413.92.202609080414-0",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhcos",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.14::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.14",
"versions": [
{
"status": "unaffected",
"version": "414.92.202609011250-0",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhcos",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.16::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.16",
"versions": [
{
"status": "unaffected",
"version": "416.94.202609011112-0",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhcos",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.18",
"versions": [
{
"status": "unaffected",
"version": "418.94.202609031320-0",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhcos",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4.19",
"versions": [
{
"status": "unaffected",
"version": "4.19.9.6.202609021231-0",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhcos",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"vendor": "Red Hat",
"product": "Red Hat Hardened Images",
"versions": [
{
"status": "unaffected",
"version": "109-6.hum1",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "dracut-main",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:6"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 6",
"packageName": "dracut",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift Container Platform 4",
"packageName": "openshift/ose-rhel-coreos-8",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-04-21T02:37:23.000Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-06-10T19:39:00.000Z",
"value": "Made public."
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:62269: Red Hat Enterprise Linux Server (v. 7 ELS)"
},
{
"lang": "en",
"value": "RHSA-2026:65839: Red Hat OpenShift Container Platform 4.13"
},
{
"lang": "en",
"value": "RHSA-2026:62409: Red Hat OpenShift Container Platform 4.14"
},
{
"lang": "en",
"value": "RHSA-2026:62549: Red Hat OpenShift Container Platform 4.16"
},
{
"lang": "en",
"value": "RHSA-2026:65851: Red Hat OpenShift Container Platform 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:63044: Red Hat OpenShift Container Platform 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:26532: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:26533: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:57580: Red Hat Enterprise Linux BaseOS EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:26534: Red Hat Enterprise Linux BaseOS (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:61252: Red Hat Enterprise Linux BaseOS E4S (v.8.8), Red Hat Enterprise Linux BaseOS TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:57775: Red Hat Enterprise Linux BaseOS E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:57785: Red Hat Enterprise Linux BaseOS E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:57772: Red Hat Enterprise Linux BaseOS EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:26713: Red Hat Hardened Images"
}
],
"x_adpType": "supplier",
"datePublic": "2026-06-10T19:39:00.000Z",
"references": [
{
"url": "https://access.redhat.com/security/cve/CVE-2026-6893",
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
]
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2459963",
"name": "RHBZ#2459963",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
]
},
{
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6893.json",
"tags": [
"x_sadp-csaf-vex"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:62269",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:65839",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:62409",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:62549",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:65851",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:63044",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:26532",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:26533",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:57580",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:26534",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:61252",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:57775",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:57785",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:57772",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
]
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:26713",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
]
}
],
"workarounds": [
{
"lang": "en",
"value": "To mitigate this issue, ensure that systems configured to obtain network settings via DHCP in the initramfs are only booted on trusted networks. This vulnerability requires an attacker to control a DHCP server on the adjacent network segment. If network configuration via DHCP is not strictly necessary during the initramfs phase, consider using static network configuration."
}
],
"x_generator": {
"engine": "sadp-cli 1.0.0"
},
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior."
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"type": "CWE",
"cweId": "CWE-78",
"description": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"
}
]
}
],
"providerMetadata": {
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP",
"dateUpdated": "2026-09-18T12:04:41.401Z"
}
}
],
"cna": {
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat",
"dateUpdated": "2026-10-27T21:54:51.100Z"
}
}
},
"related_cves": [
{
"value": "CVE-2026-6893",
"evidence": "/cveMetadata/cveId"
}
],
"security_relevant": true,
"severity_evidence": "/containers/cna/metrics"
},
"source_id": "core-cve",
"document_id": 400600,
"published_at": "2026-06-10T19:49:27.553+00:00"
}