High [CVE-2026-55995] Denial of Service via double-free in iSNS attribute decoder
This high-severity Red Hat Linux advisory covers CVE-2026-55995 affecting Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On.
Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.
VulniPulse record published Record updated
Get an email when Red Hat Linux RHEL & SELinux publishes the next one.
See Red Hat Linux RHEL & SELinux's last 90 days of advisories first. Then choose the free weekly digest, or a free month of real-time alerts with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
Summary
A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.
An unauthenticated man-in-the-middle (MITM) attacker can exploit a double-free vulnerability in the iSNS attribute decoder. This can lead to a denial of service (DoS) condition, making the affected system unavailable.
The vulnerability is network-exploitable without requiring user interaction or authentication, posing a significant risk to the availability of iSNS services in environments where the `isns-utils` package is deployed and the iSNS service is exposed. Red Hat severity: Important — CVSS 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Weakness: CWE-763.
Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support; and 7 more.
Affected versions
No affected-version range was extracted from the source record. The vendor advisory is authoritative. Check it before change work.
Official advisory · high-confidence parse· fetched 1 month ago·verify at source
- isns-utils-0:0.103-1.el10_2.1
- isns-utils-0:0.103-1.el10_0.1
- isns-utils-0:0.99-1.el8_10.1
- isns-utils-0:0.99-1.el8_4.1
- isns-utils-0:0.99-1.el8_6.1
- isns-utils-0:0.99-1.el8_8.1
- isns-utils-0:0.101-4.el9_8.1
- isns-utils-0:0.101-4.el9_2.1
- isns-utils-0:0.101-4.el9_4.1
- isns-utils-0:0.101-4.el9_6.1
- RHSA-2026:53846
- RHSA-2026:60005
- RHSA-2026:53848
- RHSA-2026:61249
- RHSA-2026:60385
- RHSA-2026:60333
- RHSA-2026:53847
- RHSA-2026:59999
- RHSA-2026:59996
- RHSA-2026:60006
Official advisory · high-confidence parse· fetched 1 month ago·verify at source
Mitigation checklist
- If the iSNS service is not actively used, disable it to prevent exploitation. To disable the `isnsd` service, execute `systemctl disable --now isnsd`. If the iSNS service is required, restrict network access to UDP port 3260 to only trusted hosts and networks using firewall rules. A service restart may be required for changes to take effect.
Official advisory · high-confidence parse· fetched 1 month ago·verify at source
More Red Hat Linux advisories
- CVE-2026-46300May 13, 2026"Fragnesia" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local
- CVE-2026-31431Apr 22, 2026algif_aead - Revert to operating out-of-place
- CVE-2026-34486Apr 9, 2026Missing Encryption of Sensitive Data due to EncryptInterceptor bypass
- CVE-2025-31277Mar 18, 2026Processing maliciously crafted web content may lead to memory corruption
- CVE-2026-53362Jul 4, 2026account for fraggap on the paged allocation path
- CVE-2026-111497Oct 22, 2026Out-of-Bounds Write in Google Brotli Decoder
Android app · Google Play
Monitor future Red Hat Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.