Dracut Project

Dracut is a widely embedded initramfs-generation framework used across Linux distributions to construct early-boot root filesystems, where its core role in system initialization gives disclosed vulnerabilities outsized structural significance despite the small disclosed volume. The vendor's exposure centers on permission and information-handling weaknesses—including incorrect default permissions, sensitive data exposure, improper link resolution, and critical resource access-control flaws—that arise from the framework's direct manipulation of system files and boot-time file operations. Current severity, exploitation activity, and CVE counts are shown alongside this summary.