Advisory severityHigh7.5Red Hat Linux Updated

High [CVE-2026-81736] Remote Denial of Service via cached SVCB/HTTPS AliasMode records

This high-severity Red Hat Linux advisory covers CVE-2026-81736; related products: Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10.

Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.

CVE-2026-81736 Source published Sep 16, 2026Source updated Sep 16, 2026

VulniPulse record published Sep 17, 2026Record updated Oct 6, 2026

CVE-2026-81736

Monitor future Red Hat Linux CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery

Get CVE alerts See app features

Summary

Remote Denial of Service via cached SVCB/HTTPS AliasMode records. Red Hat rates this important (CVSS 7.5).

Weakness: CWE-606. Red Hat lists fixing advisory RHSA-2026:75577 with package bind9.18-32:9.18.29-14.el9_8.10, bind-main-9.20.29-0.1.hum1, bind-32:9.18.33-15.el10_2.12.

Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 10.

Affected versions

9.18.0
9.18.50
9.20.0
9.20.27
9.21.0
9.21.25
9.18.11
9.20.9

Official advisory · high-confidence parse· fetched 13 days ago·verify at source

Fixed versions

bind9.18-32:9.18.29-14.el9_8.10
bind-main-9.20.29-0.1.hum1
bind-32:9.18.33-15.el10_2.12
RHSA-2026:75577

Official advisory · high-confidence parse· fetched 13 days ago·verify at source

Mitigation checklist

Recommended fix / mitigation

To mitigate the risk of this denial of service, configure BIND resolvers to restrict recursive queries to trusted clients only. This can be achieved by setting the `allow-recursion` option in the `named.conf` configuration file to specific IP addresses or networks. After modifying the configuration, the `named` service must be reloaded for the changes to take effect, which may temporarily interrupt DNS resolution.

Official advisory · high-confidence parse· fetched 13 days ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.