CVE-2026-6893

Name of the Vulnerable Software and Affected Versions dracut (affected versions not specified)

Description A flaw in the legacy DHCP path allows a remote attacker on the adjacent network to achieve root code execution within the initramfs (initial RAM file system, which is loaded with the kernel at boot to initialize the system). The issue occurs when specially crafted DHCP options, such as a malicious hostname, are improperly handled and written into temporary shell scripts without proper escaping, resulting in command injection.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.