Buffer Overflow Flaw in open-iscsi's iscsiuio Component
CVE-2026-115485

6.3MEDIUM

Key Information:

Vendor

Red Hat
Status
Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 8
Vendor
CVE Published:
23 October 2026

What is CVE-2026-115485?

A vulnerability exists within the iscsiuio component of open-iscsi related to the DHCPv6 option parser. This flaw allows for improper handling of raw network data, as the parser invokes strlen() without confirming the presence of a NUL terminator. Consequently, this oversight can lead to reading beyond the allocated buffer into heap memory. An attacker situated on the same network segment could potentially exploit this vulnerability by sending a specially crafted DHCPv6 Advertise message, resulting in a daemon crash, a minor heap overwrite, or corruption of the iSCSI initiator name.

References

https://access.redhat.com/security/cve/CVE-2026-115485
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2556266
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Red Hat would like to thank Tristan Madani (Talence Security) for reporting this issue.
.