Skip to content
VulniPulse
Sign in
Advisory severityHigh7.5Red Hat Linux

High [CVE-2026-55995] Denial of Service via double-free in iSNS attribute decoder

This high-severity Red Hat Linux advisory covers CVE-2026-55995 affecting Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On.

Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.

CVE-2026-55995 Source published Source updated

VulniPulse record published Record updated

CVE-2026-55995
Affected products & platforms
Red Hat LinuxRed Hat Enterprise Linux
Open source advisory

Android app · Google Play

Monitor future Red Hat Linux CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features

Summary

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.

An unauthenticated man-in-the-middle (MITM) attacker can exploit a double-free vulnerability in the iSNS attribute decoder. This can lead to a denial of service (DoS) condition, making the affected system unavailable.

The vulnerability is network-exploitable without requiring user interaction or authentication, posing a significant risk to the availability of iSNS services in environments where the `isns-utils` package is deployed and the iSNS service is exposed. Red Hat severity: Important — CVSS 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Weakness: CWE-763.

Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support; and 7 more.

Affected versions

No affected-version range was extracted from the source record. The vendor advisory is authoritative — check it before change work.

Official advisory · high-confidence parse· fetched 11 days ago·verify at source

Fixed versions
  • isns-utils-0:0.103-1.el10_2.1
  • isns-utils-0:0.103-1.el10_0.1
  • isns-utils-0:0.99-1.el8_10.1
  • isns-utils-0:0.99-1.el8_4.1
  • isns-utils-0:0.99-1.el8_6.1
  • isns-utils-0:0.99-1.el8_8.1
  • isns-utils-0:0.101-4.el9_8.1
  • isns-utils-0:0.101-4.el9_2.1
  • isns-utils-0:0.101-4.el9_4.1
  • isns-utils-0:0.101-4.el9_6.1
  • RHSA-2026:53846
  • RHSA-2026:60005
  • RHSA-2026:53848
  • RHSA-2026:61249
  • RHSA-2026:60385
  • RHSA-2026:60333
  • RHSA-2026:53847
  • RHSA-2026:59999
  • RHSA-2026:59996
  • RHSA-2026:60006

Official advisory · high-confidence parse· fetched 11 days ago·verify at source

Mitigation checklist

Recommended fix / mitigation
  • If the iSNS service is not actively used, disable it to prevent exploitation. To disable the `isnsd` service, execute `systemctl disable --now isnsd`. If the iSNS service is required, restrict network access to UDP port 3260 to only trusted hosts and networks using firewall rules. A service restart may be required for changes to take effect.

Official advisory · high-confidence parse· fetched 11 days ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Sign in to join the discussion.