The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-54575 advisory.

    [049-246.git20260728.0.1]
    - Refactor get_ucode_file [Orabug: 36989953]
    - Revert the fixes for bugs 33676753 and 33888951 due to regressions [Orabug: 35656614]
    - Fix typo in orabug33888951-dracut-Enable-the-code-to-create-ifcfg-file.patch [Orabug: 35268918]
    - Enable the code to create ifcfg file [Orabug: 33888951]
    - Skip parse iscsiroot.sh on PV VMs [Orabug: 33676753]
    - Add blk_mq_alloc_disk and blk_cleanup_disk to blockfuncs [Orabug: 33603682]
    - Change installation dir in network legacy module-setup so that file is never missing [Orabug: 33516170]
    - Fix paths in squash module, so that correct modprobe is installed [Orabug: 33514517]
    - Restore 51-dracut-rescue-postinst.sh for anaconda compatibility
    - Install missing 68-del-part-node.rules [Orabug: 32827579]
    - Add manpage for single-dhcp [Orabug 32201686]
    - Fix permission denied error while upgrading from OL8u2 to OL8u3 [Orabug 32160196]
    - Use pgrep in dhcp-multi.sh to make efficient and error free [Orabug 32254008]
    - Send DHCP request in parallel on all interfaces for 80% boot time improvement [Orabug: 32034110]
    - Revert fix for [Orabug: 31404167]
    - drop 51-dracut-rescue.install patch
    - Send DHCP query only on min BDF device to improve boot times by 50-60 secs [Orabug: 31404167]
    - add ofb and cts to 01fips kernel module list [Orabug: 30622737]
    - dracut-shutdown.service should run before shutdown.target is invoked [Orabug: 29629738]
    - Fix kernel-core POSTTRANS script issues with kernel command line [Orabug: 29542203]
    - Update list of necessary files after squashfs execution [Orabug: 29864620]
    - Supress iscsidm error output during non-debug PV boot [Orabug: 29846195]
    - Stop block device service in case system is dropped to emergency shell [Orabug: 29851988]
    - Enable booting from block device if netroot=iscsi has failed [Orabug: 29478156]
    - Fix BOOTPROTO calculation for iscsi [Orabug: 29518713]
    - Calculate relative path for kernel and initrd in 51-dracut-rescue.instal [Orabug: 29503293]
    - 40network scripts ifup and netlib updates for iSCSI [Orabug: 28502725]
    - Increase timeout when waiting for carrier detection on a network interface [Orabug: 24657828]     (kevin.x.lyons@oracle.com)
    - add hyperv-keyboard for Hyper-V Gen2 VM [Orabug: 19191303] (Vaughan Cao)

    [049-246.git20260728]
    - fix(base): escape die() message in emergency hook script
    - fix(base): replace eval with safe variable indirection in

    [049-246.git20260728]
    - fix(base): escape die() message in emergency hook script
    - fix(base): replace eval with safe variable indirection in

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:57785 advisory.

    The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure     based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel     at boot time and initializes the system, so it can read and boot from the root partition.

    Security Fix(es):

    * dracut: dracut: Root code execution via DHCP options command injection (CVE-2026-6893)

    * dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script     in die() (CVE-2026-15816)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:57775 advisory.

    The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure     based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel     at boot time and initializes the system, so it can read and boot from the root partition.

    Security Fix(es):

    * dracut: dracut: Root code execution via DHCP options command injection (CVE-2026-6893)

    * dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script     in die() (CVE-2026-15816)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0902 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2026-15816:
    A flaw was found in dracut. The die() error-handling function writes its message into a shell script under     the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data     derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP     server can inject a command-substitution sequence that executes as root the next time dracut sources its     emergency hook scripts during standard boot-failure handling.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2085 advisory.

    A flaw was found in dracut. The die() error-handling function writes its message into a shell script under     the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data     derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP     server can inject a command-substitution sequence that executes as root the next time dracut sources its     emergency hook scripts during standard boot-failure handling. (CVE-2026-15816)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-5bf73fe397 advisory.

    - fix(devicetree-firmware): include soc specific firmwares in install_generic()
    - fix(devicetree-firmware): include Qualcomm X2 laptop model specific firmwares
    - fix(base): escape die() message in emergency hook script
    - fix(base): replace eval with safe variable indirection in splitsep and export_n
    - feat(dracut): add module to load Qualcomm ADSP module pre-udev



Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8758-1 advisory.

    It was discovered that dracut did not properly shell-quote messages written by the die() function to the     emergency hook directory. An attacker on the adjacent network controlling a rogue DHCP server could use     this issue to inject commands that execute as root during boot-failure handling. (CVE-2026-15816)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:3598-1 advisory.

    This update for dracut fixes the following issue:

    - CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script     in `die()`       (bsc#1274432).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1634:06 advisory.

    * dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script     in die() (CVE-2026-15816)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61252 advisory.

    The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure     based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel     at boot time and initializes the system, so it can read and boot from the root partition.

    Security Fix(es):

    * dracut: dracut: Root code execution via DHCP options command injection (CVE-2026-6893)

    * dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script     in die() (CVE-2026-15816)

    * dracut: dracut: Root code execution via DHCP options command injection in NetworkManager initrd module     (CVE-2026-16445)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0280 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2026-15816:
    A flaw was found in dracut. The die() error-handling function writes its message into a shell script under     the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data     derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP     server can inject a command-substitution sequence that executes as root the next time dracut sources its     emergency hook scripts during standard boot-failure handling.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62269 advisory.

    The dracut packages contain an event-driven initial RAM file system (initramfs) generator infrastructure     based on the udev device manager. The virtual file system, initramfs, is loaded together with the kernel     at boot time and initializes the system, so it can read and boot from the root partition.

    Security Fix(es):

    * dracut: dracut: Root code execution via DHCP options command injection (CVE-2026-6893)

    * dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script     in die() (CVE-2026-15816)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0970 advisory.

    Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:

    CVE-2026-6893:
    A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability by     providing specially crafted DHCP (Dynamic Host Configuration Protocol) options, such as a malicious     hostname, to a system using dracut's legacy DHCP path. These options are improperly handled and written     into temporary shell scripts without proper escaping, leading to command injection. This allows the     attacker to achieve root code execution within the initramfs, potentially compromising the system's boot     and network behavior.

    CVE-2026-15816:
    A flaw was found in dracut. The die() error-handling function writes its message into a shell script under     the initramfs emergency-hook directory without properly shell-quoting it. When the message contains data     derived from the DHCP ROOT_PATH option, an attacker on the adjacent network who controls a rogue DHCP     server can inject a command-substitution sequence that executes as root the next time dracut sources its     emergency hook scripts during standard boot-failure handling.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
335750	Oracle Linux 8 : dracut (ELSA-2026-54575)	Nessus	Oracle Linux Local Security Checks	2026/8/15	2026/8/15	high
338412	RHEL 9 : dracut (RHSA-2026:57785)	Nessus	Red Hat Local Security Checks	2026/8/20	2026/8/20	high
338425	RHEL 9 : dracut (RHSA-2026:57775)	Nessus	Red Hat Local Security Checks	2026/8/20	2026/8/20	high
341135	TencentOS Server 3: dracut (TSSA-2026:0902)	Nessus	Tencent Local Security Checks	2026/8/27	2026/8/27	high
341875	Amazon Linux 2023 : dracut, dracut-caps, dracut-config-generic (ALAS2023-2026-2085)	Nessus	Amazon Linux Local Security Checks	2026/8/31	2026/8/31	high
342565	Fedora 45 : dracut (2026-5bf73fe397)	Nessus	Fedora Local Security Checks	2026/9/3	2026/9/3	high
345851	Ubuntu 26.04 LTS : dracut vulnerability (USN-8758-1)	Nessus	Ubuntu Local Security Checks	2026/9/15	2026/9/15	high
335087	SUSE SLES12 Security Update : dracut (SUSE-SU-2026:3598-1)	Nessus	SuSE Local Security Checks	2026/8/13	2026/8/13	high
339109	MiracleLinux 9 : dracut-057-120.git20260728.el9_8 (AXSA:2026-1634:06)	Nessus	Miracle Linux Local Security Checks	2026/8/24	2026/8/24	high
341626	RHEL 8 : dracut (RHSA-2026:61252)	Nessus	Red Hat Local Security Checks	2026/8/31	2026/8/31	high
342094	Alibaba Cloud Linux 3 : 0280: dracut (ALINUX3-SA-2026:0280)	Nessus	Alibaba Cloud Linux Local Security Checks	2026/9/1	2026/9/1	high
342246	RHEL 7 : dracut (RHSA-2026:62269)	Nessus	Red Hat Local Security Checks	2026/9/1	2026/9/1	high
342680	TencentOS Server 2: dracut (TSSA-2026:0970)	Nessus	Tencent Local Security Checks	2026/9/3	2026/9/3	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

high