CVE-2026-6893
High
Description
A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Red Hat Enterprise Linux 10
PublishedJun 10, 2026
First seenJun 10, 2026
Weakness typeCWE-78OS command injection
How to fix
Vendor advisories
- access.redhat.com/errata/RHSA-2026:26532
- access.redhat.com/errata/RHSA-2026:26533
- access.redhat.com/errata/RHSA-2026:26534
- access.redhat.com/errata/RHSA-2026:26713
- access.redhat.com/errata/RHSA-2026:57580
- access.redhat.com/errata/RHSA-2026:57772
- access.redhat.com/errata/RHSA-2026:57775
- access.redhat.com/errata/RHSA-2026:57785
- access.redhat.com/errata/RHSA-2026:61252
- access.redhat.com/errata/RHSA-2026:62269
- access.redhat.com/errata/RHSA-2026:62409
- access.redhat.com/errata/RHSA-2026:62549
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Red Hat Enterprise Linux 10 | No range specified | — |
| Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support | No range specified | — |
| Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION | No range specified | — |
| Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support | No range specified | — |
| enterprise_linux 8 | No range specified | — |
| rhel_aus 8.4 | No range specified | — |
| rhel_aus 8.6 | No range specified | — |
| rhel_e4s 8.8 | No range specified | — |
| enterprise_linux 9 | No range specified | — |
| rhel_e4s 9.2 | No range specified | — |
| rhel_e4s 9.4 | No range specified | — |
| rhel_eus 9.6 | No range specified | — |
| openshift 4.12 | No range specified | — |
| openshift 4.13 | No range specified | — |
| openshift 4.14 | No range specified | — |
| openshift 4.15 | No range specified | — |
| openshift 4.16 | No range specified | — |
| openshift 4.17 | No range specified | — |
| openshift 4.18 | No range specified | — |
| openshift 4.19 | No range specified | — |
| Red Hat Red Hat Hardened Images | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.