Giriş API Anahtarı Al

6.5Orta

CVE-2026-86847Dpdk: dpdk: guest can trigger infinite loop in vhost-crypto writeback chain cleanup

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9; Red Hat Fast Datapath for RHEL 10 Yayım: 2026-10-14 20:52 (27 gün önce)

Açıklama

A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialized next pointer when mapping a guest descriptor fails, causing the host vhost-crypto process to hang or crash.

Zayıflık türü (CWE): CWE-824

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Üretici	Ürün	Sürümler
enterprise linux	10	—
enterprise linux	8	—
enterprise linux	9	—
Red Hat	Fast Datapath for RHEL 10	all versions
Red Hat	Fast Datapath for RHEL 8	all versions
Red Hat	Fast Datapath for RHEL 9	all versions
Red Hat	Red Hat Enterprise Linux 10	all versions
Red Hat	Red Hat Enterprise Linux 8	all versions
Red Hat	Red Hat Enterprise Linux 9	all versions
Red Hat	Red Hat OpenShift Container Platform 4	all versions
Red Hat	Red Hat OpenStack Platform 13 (Queens)	all versions

Kaynaklar ve yamalar

RHSA-2026:94629 vendor-advisory
RHSA-2026:94630 vendor-advisory
RHSA-2026:96083 vendor-advisory
RHSA-2026:98505 vendor-advisory
https://access.redhat.com/security/cve/CVE-2026-86847 vdb-entry
RHBZ#2529847 issue-tracking

CVSS puanı

6.5Orta

Kaynak: redhat · CVSS 3.1

Saldırı yolu: Yerel
Karmaşıklık: Düşük
Gereken yetki: Düşük
Kullanıcı etkileşimi: Gerekmez
Kapsam: Değişir
Gizlilik: Yok
Bütünlük: Yok
Erişilebilirlik: Yüksek

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Tüm puanlar (2)

cna	CVSS 3.1	6.5Orta
secalert@redhat.com	CVSS 3.1	6.5Orta

EPSS (30 günde istismar olasılığı)

0.20%

tüm CVE'lerin %10'inden yüksek

CISA değerlendirmesi (SSVC)

İstismar: none
Otomatikleştirilebilir: no
Teknik etki: partial

Zaman çizelgesi

Numara ayrıldı2026-09-08
Yayımlandı2026-10-14 20:52
IP-DB'ye ulaştı2026-10-24 23:50
Son güncelleme2026-11-11 15:20

Numarayı veren (CNA): redhat
NVD durumu: Awaiting Analysis

Kaynakta görüntüle: CVE.org · NVD

Bu ürünlerde yeni bir açık çıktığında haber alın

E-posta uyarılarını aç

Ücretsiz · üyelikle · istediğiniz an kapatılır

Aynı üründe son açıklar — Red Hat Enterprise Linux

6.3Orta

CVE-2026-124745 45 dakika önce

Busybox: tar deferred hardlink target resolved through a deferred symlink escapes the extraction directory

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Hardened Images

A flaw was found in BusyBox. When extracting an archive, the tar utility improperly resolves deferred hardlink targets across symbolic links pointing outside the intended extraction directory. An attacker could provide a specially crafted archive that links t…

6.3Orta

CVE-2026-124744 45 dakika önce

Busybox: cpio hardlink target not sanitized under feature_path_traversal_protection

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Hardened Images

A flaw was found in BusyBox. When extracting files using the cpio utility with path traversal protection enabled, hardlink target paths are not properly sanitized. By tricking a user or automated process into extracting a crafted archive, an attacker can crea…

7.6Yüksek

CVE-2026-124741 2 saat önce

Busybox: stack buffer overflow in udhcpc6 send_d6_renew() and send_d6_release()

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Hardened Images

A flaw was found in BusyBox. The udhcpc6 DHCPv6 client does not properly validate the size of network options sent by a server before copying them into memory. A malicious DHCPv6 server on the local network can exploit this flaw by sending a crafted reply, tr…

7.5Yüksek

CVE-2026-124739 2 saat önce

Busybox: httpd stack buffer overflow via an "i:" rule in a subdirectory httpd.conf

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Hardened Images

A flaw was found in BusyBox. When the httpd web server processes subdirectory configuration files, an overly long index page name can trigger a stack-based buffer overflow. An attacker with permissions to write to a subdirectory configuration file could explo…

7.5Yüksek

CVE-2026-124737 3 saat önce

Busybox: heap buffer overflow in the tftp client on fallback to the default block size

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Hardened Images

A flaw was found in BusyBox. When the TFTP (Trivial File Transfer Protocol) client requests a custom small block size and receives a standard response, it falls back to the default block size without resizing the allocated memory buffer. A malicious TFTP serv…

6.5Orta

CVE-2026-121885 22 saat önce

Podman: untrusted image labels allow auto-update to restart arbitrary systemd units

podman; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 8; Red Hat Red Hat Enterprise Linux 9

A flaw was found in Podman. An attacker can trigger a Denial of Service (DoS) by supplying a container image containing crafted metadata labels. Podman's auto-update mechanism improperly trusts these image labels to determine which system services to restart.…