CVE catalog

CVE-2026-15816

A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message co

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.47% · Oct 25, 2026

A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP server can inject a command-substitution sequence that executes as root the next time dracut sources its emergency hook scripts during standard boot-failure handling.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiandracutsid112-7fixed
Debiandracutforky112-7fixed
Debiandracuttrixie106-6vulnerable
Debiandracutbookworm059-4vulnerable
Ubuntudracutnoble060+5-1ubuntu3.4fixed
Ubuntudracut-config-genericnoble060+5-1ubuntu3.4fixed
Ubuntudracut-config-rescuenoble060+5-1ubuntu3.4fixed
Ubuntudracut-corenoble060+5-1ubuntu3.4fixed
Ubuntudracut-installnoble060+5-1ubuntu3.4fixed
Ubuntudracut-livenoble060+5-1ubuntu3.4fixed
Ubuntudracut-networknoble060+5-1ubuntu3.4fixed
Ubuntudracut-squashnoble060+5-1ubuntu3.4fixed
Ubuntudracutpro051-1vulnerable
Ubuntudracutpro051-1ubuntu0.1~esm1fixed
Ubuntudracut24.04059-4ubuntu2vulnerable
Ubuntudracut24.04060+5-1ubuntu1vulnerable
Ubuntudracut24.04060+5-1ubuntu2vulnerable
Ubuntudracut24.04060+5-1ubuntu3vulnerable
Ubuntudracut24.04060+5-1ubuntu3.1vulnerable
Ubuntudracut24.04060+5-1ubuntu3.2vulnerable
Ubuntudracut24.04060+5-1ubuntu3.3vulnerable
Ubuntudracut24.04060+5-1ubuntu3.4fixed
Ubuntudracut26.04108-3ubuntu3vulnerable
Ubuntudracut26.04108-8ubuntu1vulnerable
Ubuntudracut26.04109-5ubuntu1vulnerable
Ubuntudracut26.04109-7ubuntu1vulnerable
Ubuntudracut26.04109-9ubuntu1vulnerable
Ubuntudracut26.04109-11ubuntu1vulnerable
Ubuntudracut26.04110-1ubuntu2vulnerable
Ubuntudracut26.04110-3ubuntu1vulnerable
Ubuntudracut26.04110-5vulnerable
Ubuntudracut26.04110-7vulnerable
Ubuntudracut26.04110-10vulnerable
Ubuntudracut26.04110-11vulnerable
Ubuntudracut26.04110-11ubuntu0.1fixed
Ubuntudracut26.04108-3ubuntu3vulnerable
Ubuntudracut26.04108-8ubuntu1vulnerable
Ubuntudracut26.04109-5ubuntu1vulnerable
Ubuntudracut26.04109-7ubuntu1vulnerable
Ubuntudracut26.04109-9ubuntu1vulnerable
Ubuntudracut26.04109-11ubuntu1vulnerable
Ubuntudracut26.04110-1ubuntu2vulnerable
Ubuntudracut26.04110-3ubuntu1vulnerable
Ubuntudracut26.04110-5vulnerable
Ubuntudracut26.04110-7vulnerable
Ubuntudracut26.04110-10vulnerable
Ubuntudracut26.04110-11vulnerable
Ubuntudracut26.04110-11ubuntu0.1fixed
Susedracutlinux enterprise server 16.0059+suse.726.gde083b3a1-160000.1.1fixed
Susedracutlinux enterprise server for sap applications 16.0059+suse.726.gde083b3a1-160000.1.1fixed
Susedracutlinux micro 6.2059+suse.726.gde083b3a1-160000.1.1fixed
Opensusedracutleap 16.0059+suse.726.gde083b3a1-160000.1.1fixed
Susedracutlinux micro 6.0059+suse.611.g7d90691-1.1fixed
Susedracutlinux micro 6.1059+suse.645.g79fd74d-slfo.1.1_1.1fixed
Susedracutlinux enterprise module for basesystem 15 sp7059+suse.572.g753fdae1b-150700.3.20.1fixed
Susedracutlinux enterprise high availability extension 15 sp7059+suse.572.g753fdae1b-150700.3.20.1fixed
Susedracutlinux enterprise micro 5.5055+suse.404.gc96044c-150500.3.44.1fixed
Susedracutlinux enterprise high performance computing 15 sp5-espos055+suse.404.gc96044c-150500.3.44.1fixed
Susedracutlinux enterprise high performance computing 15 sp5-ltss055+suse.404.gc96044c-150500.3.44.1fixed
Susedracutlinux enterprise server 15 sp5-ltss055+suse.404.gc96044c-150500.3.44.1fixed
Susedracutlinux enterprise server for sap applications 15 sp5055+suse.404.gc96044c-150500.3.44.1fixed
Susedracutlinux enterprise high availability extension 15 sp6059+suse.567.gf5cfeb7f7-150600.3.32.1fixed
Susedracutlinux enterprise server 15 sp6-ltss059+suse.567.gf5cfeb7f7-150600.3.32.1fixed
Susedracutlinux enterprise server for sap applications 15 sp6059+suse.567.gf5cfeb7f7-150600.3.32.1fixed
Opensusedracuttumbleweed112+suse.29.gc0c5e1d-1.1fixed
Susedracutlinux enterprise server 12 sp5-ltss044.2-130.1fixed
Susedracutlinux enterprise server ltss extended security 12 sp5044.2-130.1fixed
Susedracutlinux enterprise micro 5.3055+suse.367.g85633e8-150400.3.52.1fixed
Susedracutlinux enterprise micro 5.4055+suse.367.g85633e8-150400.3.52.1fixed
Susedracutlinux enterprise high performance computing 15 sp4-espos055+suse.367.g85633e8-150400.3.52.1fixed
Susedracutlinux enterprise high performance computing 15 sp4-ltss055+suse.367.g85633e8-150400.3.52.1fixed
Susedracutlinux enterprise server 15 sp4-ltss055+suse.367.g85633e8-150400.3.52.1fixed
Susedracutlinux enterprise server for sap applications 15 sp4055+suse.367.g85633e8-150400.3.52.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiandracutsourcesid112-2not yet assignedNot reported[1147447]
Debiandracutsourceforky112-2not yet assignedNot reported[1147447]
Debiandracutsourcetrixie(unfixed)not yet assignedNot reported[1147447]
Debiandracutsourcebookworm(unfixed)not yet assignedNot reported[1147447]
Ubuntudracutdebnoble060+5-1ubuntu3.4Not reportedNot reportedNot reported
Ubuntudracut-config-genericdebnoble060+5-1ubuntu3.4Not reportedNot reportedNot reported
Ubuntudracut-config-rescuedebnoble060+5-1ubuntu3.4Not reportedNot reportedNot reported
Ubuntudracut-coredebnoble060+5-1ubuntu3.4Not reportedNot reportedNot reported
Ubuntudracut-installdebnoble060+5-1ubuntu3.4Not reportedNot reportedNot reported
Ubuntudracut-livedebnoble060+5-1ubuntu3.4Not reportedNot reportedNot reported
Ubuntudracut-networkdebnoble060+5-1ubuntu3.4Not reportedNot reportedNot reported
Ubuntudracut-squashdebnoble060+5-1ubuntu3.4Not reportedNot reportedNot reported
Ubuntudracutdebpro051-1ubuntu0.1~esm1Not reportedUBUNTU-CVE-2026-15816Not reported
Ubuntudracutdeb24.04060+5-1ubuntu3.4Not reportedUBUNTU-CVE-2026-15816Not reported
Ubuntudracutdeb26.04110-11ubuntu0.1Not reportedUBUNTU-CVE-2026-15816Not reported
Ubuntudracutdeb26.04110-11ubuntu0.1Not reportedUSN-8758-1Not reported
Susedracutrpmlinux enterprise server 16.0059+suse.726.gde083b3a1-160000.1.1Not reportedSUSE-SU-2026:23314-1Not reported
Susedracutrpmlinux enterprise server for sap applications 16.0059+suse.726.gde083b3a1-160000.1.1Not reportedSUSE-SU-2026:23314-1Not reported
Susedracutrpmlinux micro 6.2059+suse.726.gde083b3a1-160000.1.1Not reportedSUSE-SU-2026:23276-1Not reported
Opensusedracutrpmleap 16.0059+suse.726.gde083b3a1-160000.1.1Not reportedOPENSUSE-SU-2026:21639-1Not reported
Susedracutrpmlinux micro 6.0059+suse.611.g7d90691-1.1Not reportedSUSE-SU-2026:23246-1Not reported
Susedracutrpmlinux micro 6.1059+suse.645.g79fd74d-slfo.1.1_1.1Not reportedSUSE-SU-2026:23195-1Not reported
Susedracutrpmlinux enterprise module for basesystem 15 sp7059+suse.572.g753fdae1b-150700.3.20.1Not reportedSUSE-SU-2026:3613-1Not reported
Susedracutrpmlinux enterprise high availability extension 15 sp7059+suse.572.g753fdae1b-150700.3.20.1Not reportedSUSE-SU-2026:3613-1Not reported
Susedracutrpmlinux enterprise micro 5.5055+suse.404.gc96044c-150500.3.44.1Not reportedSUSE-SU-2026:3611-1Not reported
Susedracutrpmlinux enterprise high performance computing 15 sp5-espos055+suse.404.gc96044c-150500.3.44.1Not reportedSUSE-SU-2026:3611-1Not reported
Susedracutrpmlinux enterprise high performance computing 15 sp5-ltss055+suse.404.gc96044c-150500.3.44.1Not reportedSUSE-SU-2026:3611-1Not reported
Susedracutrpmlinux enterprise server 15 sp5-ltss055+suse.404.gc96044c-150500.3.44.1Not reportedSUSE-SU-2026:3611-1Not reported
Susedracutrpmlinux enterprise server for sap applications 15 sp5055+suse.404.gc96044c-150500.3.44.1Not reportedSUSE-SU-2026:3611-1Not reported
Susedracutrpmlinux enterprise high availability extension 15 sp6059+suse.567.gf5cfeb7f7-150600.3.32.1Not reportedSUSE-SU-2026:3612-1Not reported
Susedracutrpmlinux enterprise server 15 sp6-ltss059+suse.567.gf5cfeb7f7-150600.3.32.1Not reportedSUSE-SU-2026:3612-1Not reported
Susedracutrpmlinux enterprise server for sap applications 15 sp6059+suse.567.gf5cfeb7f7-150600.3.32.1Not reportedSUSE-SU-2026:3612-1Not reported
Opensusedracutrpmtumbleweed112+suse.29.gc0c5e1d-1.1Not reportedOPENSUSE-SU-2026:11504-1Not reported
Susedracutrpmlinux enterprise server 12 sp5-ltss044.2-130.1Not reportedSUSE-SU-2026:3598-1Not reported
Susedracutrpmlinux enterprise server ltss extended security 12 sp5044.2-130.1Not reportedSUSE-SU-2026:3598-1Not reported
Susedracutrpmlinux enterprise micro 5.3055+suse.367.g85633e8-150400.3.52.1Not reportedSUSE-SU-2026:3599-1Not reported
Susedracutrpmlinux enterprise micro 5.4055+suse.367.g85633e8-150400.3.52.1Not reportedSUSE-SU-2026:3599-1Not reported
Susedracutrpmlinux enterprise high performance computing 15 sp4-espos055+suse.367.g85633e8-150400.3.52.1Not reportedSUSE-SU-2026:3599-1Not reported
Susedracutrpmlinux enterprise high performance computing 15 sp4-ltss055+suse.367.g85633e8-150400.3.52.1Not reportedSUSE-SU-2026:3599-1Not reported
Susedracutrpmlinux enterprise server 15 sp4-ltss055+suse.367.g85633e8-150400.3.52.1Not reportedSUSE-SU-2026:3599-1Not reported
Susedracutrpmlinux enterprise server for sap applications 15 sp4055+suse.367.g85633e8-150400.3.52.1Not reportedSUSE-SU-2026:3599-1Not reported

[Debian bug #1147447]

Notes

[trixie] dracut: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [dracut]Affected
    Details (4)
    • 059-4 · all · bookworm

      Affected

      nvd · dracut · debian · bookworm; nvd · dracut · debian · 12

    • 059-4 · all · bookworm

      Affected

      nvd · dracut · debian · bookworm; nvd · dracut · debian · 12

    • 106-5~bpo12+1 · all · bookworm-backports

      Affected

      nvd · dracut · debian · bookworm; nvd · dracut · debian · 12

    • 106-5~bpo12+1 · all · bookworm-backports

      Affected

      nvd · dracut · debian · bookworm; nvd · dracut · debian · 12

  • Source package: [dracut]

    Details (4)
    • 059-4 · all · bookworm

      Affected

      nvd · dracut · debian · bookworm; nvd · dracut · debian · 12

    • 059-4 · all · bookworm

      Affected

      nvd · dracut · debian · bookworm; nvd · dracut · debian · 12

    • 106-5~bpo12+1 · all · bookworm-backports

      Affected

      nvd · dracut · debian · bookworm; nvd · dracut · debian · 12

    • 106-5~bpo12+1 · all · bookworm-backports

      Affected

      nvd · dracut · debian · bookworm; nvd · dracut · debian · 12

  • Source package: [dracut]

    Details (4)
    • 059-4 · all · bookworm

      Affected

      nvd · dracut · debian · bookworm; nvd · dracut · debian · 12

    • 059-4 · all · bookworm

      Affected

      nvd · dracut · debian · bookworm; nvd · dracut · debian · 12

    • 106-5~bpo12+1 · all · bookworm-backports

      Affected

      nvd · dracut · debian · bookworm; nvd · dracut · debian · 12

    • 106-5~bpo12+1 · all · bookworm-backports

      Affected

      nvd · dracut · debian · bookworm; nvd · dracut · debian · 12

  • [dracut-core]Affected

    Source package: [dracut]

    Details (4)
    • 059-4 · amd64 · bookworm

      Affected

      nvd · dracut · debian · bookworm; nvd · dracut · debian · 12

    • 059-4 · arm64 · bookworm

      Affected

      nvd · dracut · debian · bookworm; nvd · dracut · debian · 12

    • 106-5~bpo12+1 · amd64 · bookworm-backports

      Affected

      nvd · dracut · debian · bookworm; nvd · dracut · debian · 12

    • 106-5~bpo12+1 · arm64 · bookworm-backports

      Affected

      nvd · dracut · debian · bookworm; nvd · dracut · debian · 12

  • [dracut-install]Affected

    Source package: [dracut]

    Details (2)
    • 106-5~bpo12+1 · amd64 · bookworm-backports

      Affected

      nvd · dracut · debian · bookworm; nvd · dracut · debian · 12

    • 106-5~bpo12+1 · arm64 · bookworm-backports

      Affected

      nvd · dracut · debian · bookworm; nvd · dracut · debian · 12

  • [dracut-live]Affected

    Source package: [dracut]

    Details (4)
    • 059-4 · all · bookworm

      Affected

      nvd · dracut · debian · bookworm; nvd · dracut · debian · 12

    • 059-4 · all · bookworm

      Affected

      nvd · dracut · debian · bookworm; nvd · dracut · debian · 12

    • 106-5~bpo12+1 · all · bookworm-backports

      Affected

      nvd · dracut · debian · bookworm; nvd · dracut · debian · 12

    • 106-5~bpo12+1 · all · bookworm-backports

      Affected

      nvd · dracut · debian · bookworm; nvd · dracut · debian · 12

  • [dracut-network]Affected

    Source package: [dracut]

    Details (4)
    • 059-4 · all · bookworm

      Affected

      nvd · dracut · debian · bookworm; nvd · dracut · debian · 12

    • 059-4 · all · bookworm

      Affected

      nvd · dracut · debian · bookworm; nvd · dracut · debian · 12

    • 106-5~bpo12+1 · all · bookworm-backports

      Affected

      nvd · dracut · debian · bookworm; nvd · dracut · debian · 12

    • 106-5~bpo12+1 · all · bookworm-backports

      Affected

      nvd · dracut · debian · bookworm; nvd · dracut · debian · 12

  • [dracut-squash]Affected

    Source package: [dracut]

    Details (4)
    • 059-4 · all · bookworm

      Affected

      nvd · dracut · debian · bookworm; nvd · dracut · debian · 12

    • 059-4 · all · bookworm

      Affected

      nvd · dracut · debian · bookworm; nvd · dracut · debian · 12

    • 106-5~bpo12+1 · all · bookworm-backports

      Affected

      nvd · dracut · debian · bookworm; nvd · dracut · debian · 12

    • 106-5~bpo12+1 · all · bookworm-backports

      Affected

      nvd · dracut · debian · bookworm; nvd · dracut · debian · 12

  • [dracut-test]Affected

    Source package: [dracut]

    Details (2)
    • 106-5~bpo12+1 · all · bookworm-backports

      Affected

      nvd · dracut · debian · bookworm; nvd · dracut · debian · 12

    • 106-5~bpo12+1 · all · bookworm-backports

      Affected

      nvd · dracut · debian · bookworm; nvd · dracut · debian · 12

[Debian 13 (Trixie)]

  • [dracut]Affected
    Details (2)
    • 106-6 · all · trixie

      Affected

      nvd · dracut · debian · 13

    • 106-6 · all · trixie

      Affected

      nvd · dracut · debian · 13

  • Source package: [dracut]

    Details (2)
    • 106-6 · all · trixie

      Affected

      nvd · dracut · debian · 13

    • 106-6 · all · trixie

      Affected

      nvd · dracut · debian · 13

  • Source package: [dracut]

    Details (2)
    • 106-6 · all · trixie

      Affected

      nvd · dracut · debian · 13

    • 106-6 · all · trixie

      Affected

      nvd · dracut · debian · 13

  • [dracut-core]Affected

    Source package: [dracut]

    Details (2)
    • 106-6 · amd64 · trixie

      Affected

      nvd · dracut · debian · 13

    • 106-6 · arm64 · trixie

      Affected

      nvd · dracut · debian · 13

  • [dracut-install]Affected

    Source package: [dracut]

    Details (2)
    • 106-6 · amd64 · trixie

      Affected

      nvd · dracut · debian · 13

    • 106-6 · arm64 · trixie

      Affected

      nvd · dracut · debian · 13

  • [dracut-live]Affected

    Source package: [dracut]

    Details (2)
    • 106-6 · all · trixie

      Affected

      nvd · dracut · debian · 13

    • 106-6 · all · trixie

      Affected

      nvd · dracut · debian · 13

  • [dracut-network]Affected

    Source package: [dracut]

    Details (2)
    • 106-6 · all · trixie

      Affected

      nvd · dracut · debian · 13

    • 106-6 · all · trixie

      Affected

      nvd · dracut · debian · 13

  • [dracut-squash]Affected

    Source package: [dracut]

    Details (2)
    • 106-6 · all · trixie

      Affected

      nvd · dracut · debian · 13

    • 106-6 · all · trixie

      Affected

      nvd · dracut · debian · 13

  • [dracut-test]Affected

    Source package: [dracut]

    Details (2)
    • 106-6 · all · trixie

      Affected

      nvd · dracut · debian · 13

    • 106-6 · all · trixie

      Affected

      nvd · dracut · debian · 13

[openSUSE Tumbleweed]

  • [dracut-extra]Unknown

    Source package: [dracut]

    Details (1)
    • 112+suse.34.g35e16b7-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 112+suse.29.gc0c5e1d-1.1

      Version impact unknown

      nvd · dracut · opensuse · tumbleweed

  • [dracut-fips]Unknown

    Source package: [dracut]

    Details (1)
    • 112+suse.34.g35e16b7-1.1 · x86_64 · tumbleweed

      Unknown · Fixed: 112+suse.29.gc0c5e1d-1.1

      Version impact unknown

      nvd · dracut · opensuse · tumbleweed

Next results

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]