USN-8828-1 (UBUNTU-CVE-2016-8637)

Vulnerability from osv_ubuntu – Published: 2026-09-28 13:33 – Updated: 2026-09-28 13:33 – Source website
VLAI
Summary
dracut vulnerabilities
Details

It was discovered that dracut created initramfs images with overly permissive permissions under certain circumstances. A local attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-8637)

It was discovered that dracut did not properly sanitize DHCP options before writing them to shell scripts under certain circumstances. A remote attacker controlling a DHCP server on the local network could possibly use this issue to execute arbitrary code as root during system boot. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2026-6893)

It was discovered that dracut did not properly quote error messages written to shell scripts under certain circumstances. A remote attacker controlling a DHCP server on the local network could possibly use this issue to execute arbitrary code as root during system boot. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2026-15816)

It was discovered that dracut did not properly sanitize network configuration data before writing it to a temporary shell script under certain circumstances. A remote attacker controlling DHCP on the local network could possibly use this issue to execute arbitrary code as root during system boot. This issue only affected Ubuntu 22.04 LTS. (CVE-2026-16445)

References
To clipboard 

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2016-8637",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-6893",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-15816",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:16.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "dracut",
            "binary_version": "044+3-3ubuntu0.1~esm1"
          },
          {
            "binary_name": "dracut-config-generic",
            "binary_version": "044+3-3ubuntu0.1~esm1"
          },
          {
            "binary_name": "dracut-config-rescue",
            "binary_version": "044+3-3ubuntu0.1~esm1"
          },
          {
            "binary_name": "dracut-core",
            "binary_version": "044+3-3ubuntu0.1~esm1"
          },
          {
            "binary_name": "dracut-network",
            "binary_version": "044+3-3ubuntu0.1~esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "dracut",
        "purl": "pkg:deb/ubuntu/dracut@044+3-3ubuntu0.1~esm1?arch=source\u0026distro=esm-apps-legacy/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "044+3-3ubuntu0.1~esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "043-2",
        "043-4",
        "044+3-1",
        "044+3-2",
        "044+3-3"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2026-6893",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-15816",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:18.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "dracut",
            "binary_version": "047-2ubuntu0.1~esm1"
          },
          {
            "binary_name": "dracut-config-generic",
            "binary_version": "047-2ubuntu0.1~esm1"
          },
          {
            "binary_name": "dracut-config-rescue",
            "binary_version": "047-2ubuntu0.1~esm1"
          },
          {
            "binary_name": "dracut-core",
            "binary_version": "047-2ubuntu0.1~esm1"
          },
          {
            "binary_name": "dracut-network",
            "binary_version": "047-2ubuntu0.1~esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "dracut",
        "purl": "pkg:deb/ubuntu/dracut@047-2ubuntu0.1~esm1?arch=source\u0026distro=esm-apps/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "047-2ubuntu0.1~esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "045+132-1",
        "047-2"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2026-6893",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-15816",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:20.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "dracut",
            "binary_version": "048+80-2ubuntu0.1~esm1"
          },
          {
            "binary_name": "dracut-config-generic",
            "binary_version": "048+80-2ubuntu0.1~esm1"
          },
          {
            "binary_name": "dracut-config-rescue",
            "binary_version": "048+80-2ubuntu0.1~esm1"
          },
          {
            "binary_name": "dracut-core",
            "binary_version": "048+80-2ubuntu0.1~esm1"
          },
          {
            "binary_name": "dracut-network",
            "binary_version": "048+80-2ubuntu0.1~esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:20.04:LTS",
        "name": "dracut",
        "purl": "pkg:deb/ubuntu/dracut@048+80-2ubuntu0.1~esm1?arch=source\u0026distro=esm-apps/focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "048+80-2ubuntu0.1~esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "048+80-2"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2026-6893",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-15816",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-16445",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:22.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "dracut",
            "binary_version": "051-1ubuntu0.1~esm1"
          },
          {
            "binary_name": "dracut-config-generic",
            "binary_version": "051-1ubuntu0.1~esm1"
          },
          {
            "binary_name": "dracut-config-rescue",
            "binary_version": "051-1ubuntu0.1~esm1"
          },
          {
            "binary_name": "dracut-core",
            "binary_version": "051-1ubuntu0.1~esm1"
          },
          {
            "binary_name": "dracut-live",
            "binary_version": "051-1ubuntu0.1~esm1"
          },
          {
            "binary_name": "dracut-network",
            "binary_version": "051-1ubuntu0.1~esm1"
          },
          {
            "binary_name": "dracut-squash",
            "binary_version": "051-1ubuntu0.1~esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:22.04:LTS",
        "name": "dracut",
        "purl": "pkg:deb/ubuntu/dracut@051-1ubuntu0.1~esm1?arch=source\u0026distro=esm-apps/jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "051-1ubuntu0.1~esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "051-1"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2026-6893",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-15816",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:24.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "dracut",
            "binary_version": "060+5-1ubuntu3.4"
          },
          {
            "binary_name": "dracut-config-generic",
            "binary_version": "060+5-1ubuntu3.4"
          },
          {
            "binary_name": "dracut-config-rescue",
            "binary_version": "060+5-1ubuntu3.4"
          },
          {
            "binary_name": "dracut-core",
            "binary_version": "060+5-1ubuntu3.4"
          },
          {
            "binary_name": "dracut-install",
            "binary_version": "060+5-1ubuntu3.4"
          },
          {
            "binary_name": "dracut-live",
            "binary_version": "060+5-1ubuntu3.4"
          },
          {
            "binary_name": "dracut-network",
            "binary_version": "060+5-1ubuntu3.4"
          },
          {
            "binary_name": "dracut-squash",
            "binary_version": "060+5-1ubuntu3.4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "dracut",
        "purl": "pkg:deb/ubuntu/dracut@060+5-1ubuntu3.4?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "060+5-1ubuntu3.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "059-4ubuntu2",
        "060+5-1ubuntu1",
        "060+5-1ubuntu2",
        "060+5-1ubuntu3",
        "060+5-1ubuntu3.1",
        "060+5-1ubuntu3.2",
        "060+5-1ubuntu3.3"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2026-15816",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:26.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "dracut",
            "binary_version": "110-11ubuntu0.1"
          },
          {
            "binary_name": "dracut-core",
            "binary_version": "110-11ubuntu0.1"
          },
          {
            "binary_name": "dracut-install",
            "binary_version": "110-11ubuntu0.1"
          },
          {
            "binary_name": "dracut-network",
            "binary_version": "110-11ubuntu0.1"
          },
          {
            "binary_name": "dracut-test",
            "binary_version": "110-11ubuntu0.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "dracut",
        "purl": "pkg:deb/ubuntu/dracut@110-11ubuntu0.1?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "110-11ubuntu0.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "108-3ubuntu3",
        "108-8ubuntu1",
        "109-5ubuntu1",
        "109-7ubuntu1",
        "109-9ubuntu1",
        "109-11ubuntu1",
        "110-1ubuntu2",
        "110-3ubuntu1",
        "110-5",
        "110-7",
        "110-10",
        "110-11"
      ]
    }
  ],
  "aliases": [],
  "details": "It was discovered that dracut created initramfs images with overly\npermissive permissions under certain circumstances. A local attacker could\npossibly use this issue to obtain sensitive information. This issue only\naffected Ubuntu 16.04 LTS. (CVE-2016-8637)\n\nIt was discovered that dracut did not properly sanitize DHCP options\nbefore writing them to shell scripts under certain circumstances. A remote\nattacker controlling a DHCP server on the local network could possibly use\nthis issue to execute arbitrary code as root during system boot. This issue\nonly affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS,\nUbuntu 22.04 LTS, and Ubuntu 24.04 LTS. (CVE-2026-6893)\n\nIt was discovered that dracut did not properly quote error messages written\nto shell scripts under certain circumstances. A remote attacker controlling\na DHCP server on the local network could possibly use this issue to execute\narbitrary code as root during system boot. This issue only affected Ubuntu\n16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu\n24.04 LTS. (CVE-2026-15816)\n\nIt was discovered that dracut did not properly sanitize network\nconfiguration data before writing it to a temporary shell script under\ncertain circumstances. A remote attacker controlling DHCP on the local\nnetwork could possibly use this issue to execute arbitrary code as root\nduring system boot. This issue only affected Ubuntu 22.04 LTS.\n(CVE-2026-16445)",
  "id": "USN-8828-1",
  "modified": "2026-09-28T13:33:37Z",
  "published": "2026-09-28T13:33:37Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8828-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2016-8637"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-6893"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-15816"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-16445"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "dracut vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2016-8637",
    "UBUNTU-CVE-2026-6893",
    "UBUNTU-CVE-2026-15816",
    "UBUNTU-CVE-2026-16445"
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.