CVE-2026-14258
CVE-2026-14258: 1 tracked advisory record across Red Hat. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Red Hat
1 advisory- Advisory severityMedium6.5
Medium [CVE-2026-14258] Dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length ipv6 nd option in router advertisement handling
CVE-2026-14258Source published Source updated
A flaw was found in dhcpcd's IPv6 Neighbor Discovery Router Advertisement processing. Successful exploitation may result in excessive CPU consumption, leading to a denial of service. Red Hat Product Security has rated this vulnerability as Moderate. Because Router Advertisements are processed automatically by dhcpcd, no additional user interaction or prior authentication is required. The root cause of this vulnerability is inconsistent validation during Router Advertisement processing. While malformed Neighbor Discovery options are detected during the initial parsing stage, a specially crafted packet may already have been retained for subsequent processing. ``` Earlier upstream release 75289ca (dhcpcd v10.2.0) addressed this by immediately discarding malformed Router Advertisements…
- Affected products in this advisory
- Red Hat Enterprise Linux 10
- Red Hat package: dhcpcd
- Source-reported affected versions
- Affected-version details not available in this record.
- Source-reported fixed versions
- dhcpcd-0:10.0.6-11.el10_2
- RHSA-2026:54210
- Mitigation guidance
- Until an updated package is available, administrators should disable IPv6 Router Advertisement processing on interfaces where it is not required or restrict acceptance of untrusted ICMPv6 Router Advertisements using appropriate network filtering. Systems that rely on IPv6 Stateless Address Autoconfiguration (SLAAC) or Router Advertisement-based network configuration should carefully evaluate the operational impact before applying these mitigations.
Android app · Google Play
Monitor future Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.