USN-8828-1: dracut vulnerabilities
Ubuntu patches dracut flaws, including DHCP option injection that could run code as root at boot.
USN-8828-1 addresses dracut vulnerabilities. CVE-2016-8637, limited to Ubuntu 16.04 LTS, created initramfs images with overly permissive permissions that a local attacker could use to obtain sensitive information. CVE-2026-6893, affecting Ubuntu 16.04 LTS through 24.04 LTS, failed to sanitize DHCP options before writing them into shell scripts, so a remote attacker controlling a local DHCP server could execute arbitrary code as root during boot. The supplied notice is truncated and does not state that exploitation has been observed.
- CVE-2016-8637 exposes initramfs data on Ubuntu 16.04 LTS only
- CVE-2026-6893 lets a malicious LAN DHCP server gain root at boot
- DHCP flaw affects Ubuntu 16.04 LTS through 24.04 LTS
- The notice is truncated and does not confirm exploitation
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2016-8637 | A local information disclosure issue was found in dracut before 045 when generating initramfs images with world-readable permissions when 'early cpio' is used… | 7.8 | <1% | PoC ×2 | |
| CVE-2026-6893 | dracut: A remote attacker on the adjacent network can exploit this vulnerability by providing specially crafted DHCP (Dynamic Host… | 7.5 | 1% |
From the original article
It was discovered that dracut created initramfs images with overly permissive permissions under certain circumstances. A local attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 16.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.