Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.7
CVE-2026-56117: Dhcpcd Control Socket Allows Local Attackers to Cause Memory Corruption
CVE-2026-56117
CVE-2026-56117
Summary
A security issue in dhcpcd's control socket allows local attackers to potentially cause memory corruption if they can send specific commands to the control socket. This issue is more likely to affect systems where privilege separation is disabled or has failed. To mitigate this issue, update dhcpcd to the latest version, and consider enabling privilege separation to limit the impact of potential attacks.
What to do
No fix is available yet. Check with your software vendor for updates.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| dhcpcd_project | dhcpcd |
<= 10.3.2 cpe:2.3:a:dhcpcd_project:dhcpcd:*:*:*:*:*:*:*:* |
| networkconfiguration | dhcpcd | <= 10.3.2 |
Original title
dhcpcd Heap Use-After-Free via Control Socket Handling
Original description
dhcpcd through 10.3.2, fixed in commit 78ea09e, contains a heap use-after-free vulnerability in the control socket handling within src/control.c that allows local unprivileged attackers to trigger memory corruption when privilege separation is disabled. Attackers can connect to the control socket and send a privileged command such as -x, causing control_recvdata() to free the client object while the same READ+HANGUP event subsequently reaches control_hangup() with the stale pointer, resulting in a use-after-free condition exploitable in deployments using --disable-privsep or where privsep initialization has failed with the control socket operating in mode 0666.
nvd CVSS3.1
4.7
nvd CVSS4.0
5.7
Vulnerability type
CWE-416
Use After Free
Published: 23 Jun 2026 · Updated: 14 Jul 2026 · First seen: 23 Jun 2026