Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products4

• Red Hat Hardened Images
• dracut-main@aarch64 as a component of Red Hat Hardened Images
• dracut-main@src as a component of Red Hat Hardened Images
• dracut-main@x86_64 as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Workaround: Avoid using the root=dhcp/netroot=dhcp/root=dhcp6/netroot=dhcp6 kernel command-line options — these cause dracut to trust the DHCP server's root-path option to determine the boot target. Configuring the netroot target explicitly on the kernel/PXE command line instead (e.g. netroot=nfs:<server>:<path> or netroot=iscsi:... with a literal value).

🔗 References (5)

• selfhttps://access.redhat.com/errata/RHSA-2026:40700
• externalhttps://images.redhat.com/
• externalhttps://access.redhat.com/security/cve/CVE-2026-16445
• externalhttps://access.redhat.com/security/updates/classification/
• selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_40700.json