Red Hat Product Errata RHSA-2026:61252 - Security Advisory Issued: 2026-08-31 Updated: 2026-08-31 RHSA-2026:61252 - Security Advisory Overview Updated Packages Synopsis Important: dracut security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for dracut is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel at boot time and initializes the system, so it can read and boot from the root partition. Security Fix(es): dracut: dracut: Root code execution via DHCP options command injection (CVE-2026-6893) dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die() (CVE-2026-15816) dracut: dracut: Root code execution via DHCP options command injection in NetworkManager initrd module (CVE-2026-16445) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.8 x86_64 Red Hat Enterprise Linux Server - TUS 8.8 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64 Fixes BZ - 2459963 - CVE-2026-6893 dracut: dracut: Root code execution via DHCP options command injection BZ - 2500889 - CVE-2026-15816 dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die() BZ - 2503147 - CVE-2026-16445 dracut: dracut: Root code execution via DHCP options command injection in NetworkManager initrd module CVEs CVE-2026-6893 CVE-2026-15816 CVE-2026-16445 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Life Cycle Long Life 8.8 SRPM dracut-049-223.git20230119.el8_8.1.src.rpm SHA-256: b0f5493ac87ecee0589d5bfbf7c52c16f6b7637655842316e358d3065173174e x86_64 dracut-049-223.git20230119.el8_8.1.x86_64.rpm SHA-256: 07bb7cfd1a988e092eed559ac663973570a2671e2a53d8fe4f9222dbba7bf642 dracut-caps-049-223.git20230119.el8_8.1.x86_64.rpm SHA-256: ba01b0bb9d88e89b054599ac25e2cb2ab90a2f697ef5228e59bf1860d25d751f dracut-config-generic-049-223.git20230119.el8_8.1.x86_64.rpm SHA-256: 1edb41a4fc06cec0a680448c716fa5b4316a433b12ff3e52e1dd98024bb5beaf dracut-config-rescue-049-223.git20230119.el8_8.1.x86_64.rpm SHA-256: 9ede5d75c82a8fcec93c7deeef499a438780f341efd39d2b06879cb62abbc018 dracut-debuginfo-049-223.git20230119.el8_8.1.x86_64.rpm SHA-256: a231a51bef3f76664e16e44fcce91efc98cebd7f0a753a444594663cfa42c057 dracut-debugsource-049-223.git20230119.el8_8.1.x86_64.rpm SHA-256: 1bbba02b46632a079dd647ecedb850e77de0fb58c2fc755f30ca808567e1072b dracut-live-049-223.git20230119.el8_8.1.x86_64.rpm SHA-256: 51c0991117c441944ea90d112f46bca2b5ef6e475ad341dfc23a9022b815f9be dracut-network-049-223.git20230119.el8_8.1.x86_64.rpm SHA-256: 1425646da70e6b58fdb87f10df0a63488cb882c4a9fd9d862f4fd0fbbd15a1e5 dracut-squash-049-223.git20230119.el8_8.1.x86_64.rpm SHA-256: 30c25ff365844da16a7c27cee02cd718a881e82475ab94c152bdaea9a51af6cb dracut-tools-049-223.git20230119.el8_8.1.x86_64.rpm SHA-256: 0ebf9298d618da9ba0b5ca2f77fcdea63f956d4cf615e4cb4df0871e428be572 Red Hat Enterprise Linux Server - TUS 8.8 SRPM dracut-049-223.git20230119.el8_8.1.src.rpm SHA-256: b0f5493ac87ecee0589d5bfbf7c52c16f6b7637655842316e358d3065173174e x86_64 dracut-049-223.git20230119.el8_8.1.x86_64.rpm SHA-256: 07bb7cfd1a988e092eed559ac663973570a2671e2a53d8fe4f9222dbba7bf642 dracut-caps-049-223.git20230119.el8_8.1.x86_64.rpm SHA-256: ba01b0bb9d88e89b054599ac25e2cb2ab90a2f697ef5228e59bf1860d25d751f dracut-config-generic-049-223.git20230119.el8_8.1.x86_64.rpm SHA-256: 1edb41a4fc06cec0a680448c716fa5b4316a433b12ff3e52e1dd98024bb5beaf dracut-config-rescue-049-223.git20230119.el8_8.1.x86_64.rpm SHA-256: 9ede5d75c82a8fcec93c7deeef499a438780f341efd39d2b06879cb62abbc018 dracut-debuginfo-049-223.git20230119.el8_8.1.x86_64.rpm SHA-256: a231a51bef3f76664e16e44fcce91efc98cebd7f0a753a444594663cfa42c057 dracut-debugsource-049-223.git20230119.el8_8.1.x86_64.rpm SHA-256: 1bbba02b46632a079dd647ecedb850e77de0fb58c2fc755f30ca808567e1072b dracut-live-049-223.git20230119.el8_8.1.x86_64.rpm SHA-256: 51c0991117c441944ea90d112f46bca2b5ef6e475ad341dfc23a9022b815f9be dracut-network-049-223.git20230119.el8_8.1.x86_64.rpm SHA-256: 1425646da70e6b58fdb87f10df0a63488cb882c4a9fd9d862f4fd0fbbd15a1e5 dracut-squash-049-223.git20230119.el8_8.1.x86_64.rpm SHA-256: 30c25ff365844da16a7c27cee02cd718a881e82475ab94c152bdaea9a51af6cb dracut-tools-049-223.git20230119.el8_8.1.x86_64.rpm SHA-256: 0ebf9298d618da9ba0b5ca2f77fcdea63f956d4cf615e4cb4df0871e428be572 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 SRPM dracut-049-223.git20230119.el8_8.1.src.rpm SHA-256: b0f5493ac87ecee0589d5bfbf7c52c16f6b7637655842316e358d3065173174e ppc64le dracut-049-223.git20230119.el8_8.1.ppc64le.rpm SHA-256: e93b6b350a9f65928135dcacf99fc1592b04a04183a0e55a3a96a963f3b504f2 dracut-caps-049-223.git20230119.el8_8.1.ppc64le.rpm SHA-256: b36aaf174105f71e2541cb0ebd8925513291934eb741ea689d67fc78e2fcaa50 dracut-config-generic-049-223.git20230119.el8_8.1.ppc64le.rpm SHA-256: 702214c06cd2cf474c1d5719e6f4e7ae6ffd79a407eac3c24ba631a1430c8b49 dracut-config-rescue-049-223.git20230119.el8_8.1.ppc64le.rpm SHA-256: 769d4f96b374916f3e6c0694b7da9fb6558e9fecde76fc66a86cbb35d1b0d778 dracut-debuginfo-049-223.git20230119.el8_8.1.ppc64le.rpm SHA-256: 96a8f246f7b8cbc03e24275167374f28d499c41c06297725983bd2b499815cd5 dracut-debugsource-049-223.git20230119.el8_8.1.ppc64le.rpm SHA-256: 414d9b7ba348898acc60e2c2be09ce90d4b82bbd9aac876ffcdea6b5ffbe8e0c dracut-live-049-223.git20230119.el8_8.1.ppc64le.rpm SHA-256: abe197b91ab86663077eaa790c247ea802a30db0029de69c905014867dc6bede dracut-network-049-223.git20230119.el8_8.1.ppc64le.rpm SHA-256: 315121c68bf9b8697b62b159f30f6b8be75761185374ef4016b90802d4f48cf1 dracut-squash-049-223.git20230119.el8_8.1.ppc64le.rpm SHA-256: 1ee88d57bb82148cc2664004f2b06e9b45422f775e79ab2e8c49d3c0978d22c1 dracut-tools-049-223.git20230119.el8_8.1.ppc64le.rpm SHA-256: 89ea52a2d80bb1a746d94074699b297f18f2c6af5132206a386a44fdebe31314 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 SRPM dracut-049-223.git20230119.el8_8.1.src.rpm SHA-256: b0f5493ac87ecee0589d5bfbf7c52c16f6b7637655842316e358d3065173174e x86_64 dracut-049-223.git20230119.el8_8.1.x86_64.rpm SHA-256: 07bb7cfd1a988e092eed559ac663973570a2671e2a53d8fe4f9222dbba7bf642 dracut-caps-049-223.git20230119.el8_8.1.x86_64.rpm SHA-256: ba01b0bb9d88e89b054599ac25e2cb2ab90a2f697ef5228e59bf1860d25d751f dracut-config-generic-049-223.git20230119.el8_8.1.x86_64.rpm SHA-256: 1edb41a4fc06cec0a680448c716fa5b4316a433b12ff3e52e1dd98024bb5beaf dracut-config-rescue-049-223.git20230119.el8_8.1.x86_64.rpm SHA-256: 9ede5d75c82a8fcec93c7deeef499a438780f341efd39d2b06879cb62abbc018 dracut-debuginfo-049-223.git20230119.el8_8.1.x86_64.rpm SHA-256: a231a51bef3f76664e16e44fcce91efc98cebd7f0a753a444594663cfa42c057 dracut-debugsource-049-223.git20230119.el8_8.1.x86_64.rpm SHA-256: 1bbba02b46632a079dd647ecedb850e77de0fb58c2fc755f30ca808567e1072b dracut-live-049-223.git20230119.el8_8.1.x86_64.rpm SHA-256: 51c0991117c441944ea90d112f46bca2b5ef6e475ad341dfc23a9022b815f9be dracut-network-049-223.git20230119.el8_8.1.x86_64.rpm SHA-256: 1425646da70e6b58fdb87f10df0a63488cb882c4a9fd9d862f4fd0fbbd15a1e5 dracut-squash-049-223.git20230119.el8_8.1.x86_64.rpm SHA-256: 30c25ff365844da16a7c27cee02cd718a881e82475ab94c152bdaea9a51af6cb dracut-tools-049-223.git20230119.el8_8.1.x86_64.rpm SHA-256: 0ebf9298d618da9ba0b5ca2f77fcdea63f956d4cf615e4cb4df0871e428be572 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .