Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-95508: Red Hat Linux and OpenShift host may crash or be hijacked

CVE-2026-95508 · published 1 month ago

Summary

The libslirp library used in Red Hat Enterprise Linux (versions 8, 9, and 10) and Red Hat OpenShift Container Platform (versions 4 and 5) can overflow memory when it handles certain network requests on a very small network interface. An attacker who controls a virtual machine could cause the host system to stop working or potentially run their own code. Update to the latest packages from Red Hat that fix libslirp, or reduce the network interface size to the default value.

What to do

Update debian libslirp to version 4.9.5-1.

Affected software

Ecosystem	Vendor	Product	Affected versions
–	red hat	red hat openshift container platform 5	All versions
–	red hat	red hat enterprise linux 10	All versions
–	red hat	red hat enterprise linux 8	All versions
–	red hat	red hat enterprise linux 9	All versions
–	red hat	red hat openshift container platform 4	All versions
Debian:12	debian	libslirp	All versions
Ubuntu:20.04:LTS	canonical	libslirp	All versions
Debian:14	debian	libslirp	< 4.9.5-1 Fix: upgrade to 4.9.5-1

Original advisory text

Libslirp: libslirp: heap buffer overflow in dhcpv6/tftp response builders on small interface mtu

A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp. When the host is configured with a small interface MTU, a guest-supplied DHCPv6 CLIENTID option or TFTP blksize option can overflow the reply buffer with attacker-controlled content and length, resulting in denial of service and potentially arbitrary code execution in the host process. The default interface MTU is not affected.

References

https://security-tracker.debian.org/tracker/CVE-2026-95508 Vendor Advisory
https://ubuntu.com/security/CVE-2026-95508 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-95508 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-95508
https://bugzilla.redhat.com/show_bug.cgi?id=2537748

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

7.4 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-787Out-of-bounds Write

Timeline

Published22 Sep 2026

Updated4 Nov 2026

First seen22 Sep 2026

Sources

CVE-2026-95508 · NVD

CVE-2026-95508 · MITRE

DEBIAN-CVE-2026-95508 · OSV

UBUNTU-CVE-2026-95508 · OSV

Track software like this

Free during beta