CVE-2026-6893

Name	CVE-2026-6893
Description	A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written into temporary shell scripts without proper escaping, leading to command injection. This allows the attacker to achieve root code execution within the initramfs, potentially compromising the system's boot and network behavior.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
dracut (PTS)	bullseye	051-1	vulnerable
	bookworm	059-4	vulnerable
	trixie	106-6	vulnerable
	forky, sid	111-2	vulnerable

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
dracut	source	(unstable)	(unfixed)

https://bugzilla.redhat.com/show_bug.cgi?id=2459963
check upstream status, as only reference is Red Hat bugzilla entry