Launchpad.net

CVE 2016-5759

The mkdumprd script called "dracut" in the current working directory "." allows local users to trick the administrator into executing code as root.

See the CVE page on Mitre.org for more details.