CVE-2026-18726

Katalog CVE

CVSS 6.5 · Medium EPSS 0,21%

Kerentanan Loop with Unreachable Exit Condition ('Infinite Loop') pada redhat enterprise linux. Skor CVSS 3.1 6.5 (Medium) menurut redhat.com.

Deskripsi (NVD)

A flaw was found in open-iscsi. This vulnerability allows a remote attacker on the same local network segment to cause a Denial of Service (DoS) in the iscsiuio daemon. By sending a specially crafted Internet Control Message Protocol version 6 (ICMPv6) Router Advertisement with a zero-length option, the attacker can trigger an infinite loop. This leads to sustained CPU usage, rendering the daemon unresponsive and impacting system availability. A secondary risk of out-of-bounds reads exists with a short IPv6 payload, though no memory corruption or data exposure has been confirmed.

Rincian

Terbit di NVD

12 Agustus 2026

Terakhir diubah

25 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

6.5 (Medium), sumber redhat.com
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')

EPSS (30 hari)

0,21% peluang dieksploitasi; lebih tinggi dari 9,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2026-18726 advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=2462331 issue tracking