CVE-2026-5165

Katalog CVE

CVSS 7.8 · High EPSS 0,16%

Kerentanan Expired Pointer Dereference pada redhat virtio-win, redhat enterprise linux. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

A flaw was found in virtio-win, specifically within the VirtIO Block (BLK) device. When the device undergoes a reset, it fails to properly manage memory, resulting in a use-after-free vulnerability. This issue could allow a local attacker to corrupt system memory, potentially leading to system instability or unexpected behavior.

Rincian

Terbit di NVD

30 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-825: Expired Pointer Dereference

EPSS (30 hari)

0,16% peluang dieksploitasi; lebih tinggi dari 4,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2026-5165 advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=2453015 issue tracking · advisory vendor
• https://github.com/virtio-win/kvm-guest-drivers-windows/pull/1493 issue tracking