Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Dracut Emergency Hook Code Execution Vulnerability
published 2 months ago
Summary
An update is available for dracut, a tool used in Linux system installation. This update fixes a security issue that could allow an attacker to execute malicious code on the system. We recommend applying the update to ensure the security of your system.
What to do
- Update suse dracut to version 044.2-130.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| SUSE:Linux Enterprise Server 12 SP5-LTSS | suse | dracut |
< 044.2-130.1 Fix: upgrade to 044.2-130.1
|
| SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | suse | dracut |
< 044.2-130.1 Fix: upgrade to 044.2-130.1
|
Original advisory text
Security update for dracut
This update for dracut fixes the following issue:
- CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in `die()`
(bsc#1274432).
- CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in `die()`
(bsc#1274432).
References
- https://www.suse.com/support/update/announcement/2026/suse-su-20263598-1/ Vendor Advisory
- https://bugzilla.suse.com/1274432 Third Party Advisory
- https://www.suse.com/security/cve/CVE-2026-15816 URL
Timeline
Published12 Aug 2026
Updated13 Aug 2026
First seen13 Aug 2026
Sources
SUSE-SU-2026:3598-1 · OSV
Track software like this
Free during beta