https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 15:08:07 +0000 https://cve.radiocsirt.org/vuln/alsa-2026:54571 <p><strong>Affected:</strong> AlmaLinux:9: dracut, AlmaLinux:9: dracut-caps, AlmaLinux:9: dracut-config-generic, AlmaLinux:9: dracut-config-rescue, AlmaLinux:9: dracut-live, AlmaLinux:9: dracut-network, AlmaLinux:9: dracut-squash, AlmaLinux:9: dracut-tools</p> <p>The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition.</p> <p>Security Fix(es):</p> <p>* dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die() (CVE-2026-15816)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: dracut, AlmaLinux:9: dracut-caps, AlmaLinux:9: dracut-config-generic, AlmaLinux:9: dracut-config-rescue, AlmaLinux:9: dracut-live, AlmaLinux:9: dracut-network, AlmaLinux:9: dracut-squash, AlmaLinux:9: dracut-tools</p> <p>The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition.</p> <p>Security Fix(es):</p> <p>* dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die() (CVE-2026-15816)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2026:54571 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1256 certfr-2026-avi-1256 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1256 https://cve.radiocsirt.org/vuln/euvd-2026-381980 EUVD-2026-381980 https://cve.radiocsirt.org/vuln/euvd-2026-381980 https://cve.radiocsirt.org/vuln/fkie_cve-2026-15816 <p>A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP server can inject a command-substitution sequence that executes as root the next time dracut sources its emergency hook scripts during standard boot-failure handling.</p> <p>A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP server can inject a command-substitution sequence that executes as root the next time dracut sources its emergency hook scripts during standard boot-failure handling.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-15816 https://cve.radiocsirt.org/vuln/ghsa-8pxm-cr92-crx8 <p>A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP server can inject a command-substitution sequence that executes as root the next time dracut sources its emergency hook scripts during standard boot-failure handling.</p> <p>A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP server can inject a command-substitution sequence that executes as root the next time dracut sources its emergency hook scripts during standard boot-failure handling.</p> https://cve.radiocsirt.org/vuln/ghsa-8pxm-cr92-crx8 https://cve.radiocsirt.org/vuln/oesa-2026-3472 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: dracut</p> <p>dracut contains tools to create bootable initramfses for the Linux kernel. Unlike previous implementations, dracut hard-codes as little as possible into the initramfs. dracut contains various modules which are driven by the event-based udev. Having root on MD, DM, LVM2, LUKS is supported as well as NFS, iSCSI, NBD, FCoE with the dracut-network package. Security Fix(es):</p> <p>A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP server can inject a command-substitution sequence that executes as root the next time dracut sources its emergency hook scripts during standard boot-failure handling.(CVE-2026-15816)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: dracut</p> <p>dracut contains tools to create bootable initramfses for the Linux kernel. Unlike previous implementations, dracut hard-codes as little as possible into the initramfs. dracut contains various modules which are driven by the event-based udev. Having root on MD, DM, LVM2, LUKS is supported as well as NFS, iSCSI, NBD, FCoE with the dracut-network package. Security Fix(es):</p> <p>A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP server can inject a command-substitution sequence that executes as root the next time dracut sources its emergency hook scripts during standard boot-failure handling.(CVE-2026-15816)</p> https://cve.radiocsirt.org/vuln/oesa-2026-3472 https://cve.radiocsirt.org/vuln/rhsa-2026:54571 <p>dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()</p> <p>dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()</p> https://cve.radiocsirt.org/vuln/rhsa-2026:54571 https://cve.radiocsirt.org/vuln/rhsa-2026:57580 <p>dracut: dracut: Root code execution via DHCP options command injection dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()</p> <p>dracut: dracut: Root code execution via DHCP options command injection dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()</p> https://cve.radiocsirt.org/vuln/rhsa-2026:57580 https://cve.radiocsirt.org/vuln/rlsa-2026:54571 <p><strong>Affected:</strong> Rocky Linux:9: dracut</p> <p>The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition.</p> <p>Security Fix(es):</p> <p>* dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die() (CVE-2026-15816)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> Rocky Linux:9: dracut</p> <p>The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition.</p> <p>Security Fix(es):</p> <p>* dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die() (CVE-2026-15816)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/rlsa-2026:54571 https://cve.radiocsirt.org/vuln/suse-su-2026:3598-1 <p>Security update for dracut</p> <p>Security update for dracut</p> https://cve.radiocsirt.org/vuln/suse-su-2026:3598-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-15816 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: dracut, Ubuntu:Pro:18.04:LTS: dracut, Ubuntu:Pro:20.04:LTS: dracut, Ubuntu:Pro:22.04:LTS: dracut, Ubuntu:24.04:LTS: dracut, Ubuntu:26.04:LTS: dracut</p> <p>A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP server can inject a command-substitution sequence that executes as root the next time dracut sources its emergency hook scripts during standard boot-failure handling.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: dracut, Ubuntu:Pro:18.04:LTS: dracut, Ubuntu:Pro:20.04:LTS: dracut, Ubuntu:Pro:22.04:LTS: dracut, Ubuntu:24.04:LTS: dracut, Ubuntu:26.04:LTS: dracut</p> <p>A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP server can inject a command-substitution sequence that executes as root the next time dracut sources its emergency hook scripts during standard boot-failure handling.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-15816 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2835 <p>Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Informationen offenzulegen und beliebigen Code mit Root-Rechten auszuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um Informationen offenzulegen und beliebigen Code mit Root-Rechten auszuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2835