Buffer Overflow Vulnerability in libstoragemgmt Affecting Red Hat Products
CVE-2026-93433

5.5MEDIUM

Key Information:

Vendor

Red Hat
Status
Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 8
Red Hat Enterprise Linux 9
Vendor
CVE Published:
21 September 2026

What is CVE-2026-93433?

A buffer overflow vulnerability exists within the libstoragemgmt library. An attacker in control of a local or virtual storage device can exploit this flaw by providing specially crafted SCSI Vital Product Data (VPD) page 0x80 data. This malformed input can manipulate the untrusted page length field, leading to a stack buffer overflow in the _sg_parse_vpd_80() function during the process of parsing the serial number. If successfully exploited, this vulnerability can cause a denial of service by crashing or destabilizing the service that queries the affected serial number.

References

https://access.redhat.com/security/cve/CVE-2026-93433
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2465818
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This issue was discovered by Found by AISLE in partnership with Red Hat.
.