Advisory severityMedium6.5Red Hat Linux

Medium [CVE-2026-114042] use-after-free in drdynvc virtual channel PDU handling

This medium-severity Red Hat Linux advisory covers CVE-2026-114042.

Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.

CVE-2026-114042 Source published Oct 21, 2026Source updated Oct 21, 2026

VulniPulse record published Oct 21, 2026

CVE-2026-114042

Affected products & platforms

Red Hat LinuxUnclassified

Open source advisory

Android app · Google Play

Monitor future Red Hat Linux CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery

Get CVE alerts See app features

Summary

A flaw was found in FreeRDP. The drdynvc channel frees a pool-owned stream with the owned-stream deallocator when totalLength is smaller than the chunk size.

A malicious RDP server can send a crafted Virtual Channel PDU to trigger the free and crash the client during teardown. This issue affects FreeRDP 3.32.0 only (fixed in 3.32.1).

This issue is rated Moderate because a user must connect to a malicious RDP server (UI:R) and the demonstrated impact is a client crash (availability only), with no confirmed confidentiality or integrity impact. Upstream identifies FreeRDP 3.32.0 as the affected version.

Red Hat Enterprise Linux ships FreeRDP 2.x (RHEL 8/9) or 3.10.x (RHEL 10), not 3.32.0, so Red Hat products are not affected. Fedora has moved to 3.32.1 or later and is not affected.

Red Hat severity: Moderate — CVSS 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H). Weakness: CWE-416.

Affected versions

No affected-version range was extracted from the source record. The vendor advisory is authoritative — check it before change work.

Official advisory · high-confidence parse· fetched 37 minutes ago·verify at source

Fixed versions

3.32.0
3.32.1

Official advisory · high-confidence parse· fetched 37 minutes ago·verify at source

Mitigation checklist

Recommended fix / mitigation

Red Hat Enterprise Linux FreeRDP packages do not ship the affected 3.32.0 release and require no update for this CVE. Where FreeRDP 3.32.0 is installed (for example interim Fedora builds), upgrade to 3.32.1 or later. Do not connect FreeRDP clients to untrusted RDP servers ([CME-202](https://cmetaxonomy.org/entries/CME-202.html), [CME-203](https://cmetaxonomy.org/entries/CME-203.html)). Process/cgroup limits can contain host impact from a crashed client but do not prevent the DoS ([CME-114](https://cmetaxonomy.org/entries/CME-114.html), [CME-704](https://cmetaxonomy.org/entries/CME-704.html)).

Official advisory · high-confidence parse· fetched 37 minutes ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.