Vulnerability · Published Oct 23, 2026 · Assigned by redhat
CVE-2026-115484Open-iscsi: open-iscsi: dhcpv4 option parser heap out-of-bounds read in iscsiuio parse_msg
High 7.6
In plain English
A high-severity out-of-bounds read in Red Hat Enterprise Linux 10 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities).
Severity (CVSS 3.1)7.6High
Exploit odds (30 days)0.2%top 87.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read beyond the allocated buffer into adjacent heap memory. An attacker on the same network segment can send a crafted DHCP response to crash the daemon or corrupt its network configuration.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | open-iscsi | no fix listed | DEBIAN-CVE-2026-115484 |
| Debian:13 | open-iscsi | no fix listed | DEBIAN-CVE-2026-115484 |
| Debian:14 | open-iscsi | no fix listed | DEBIAN-CVE-2026-115484 |
| Ubuntu:22.04:LTS | open-iscsi | no fix listed | UBUNTU-CVE-2026-115484 |
| Ubuntu:24.04:LTS | open-iscsi | no fix listed | UBUNTU-CVE-2026-115484 |
| Ubuntu:26.04:LTS | open-iscsi | no fix listed | UBUNTU-CVE-2026-115484 |
| Ubuntu:26.10 | open-iscsi | no fix listed | UBUNTU-CVE-2026-115484 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | see references |
| Red Hat | Red Hat Enterprise Linux 6 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
Weakness: CWE-125 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
References
- https://access.redhat.com/security/cve/CVE-2026-115484 vdb-entry, x_refsource_REDHAT
- RHBZ#2556265 issue-tracking, x_refsource_REDHAT