A flaw was found in the SFTP backend in gvfs. (CVE-2026-84268)
A heap-based buffer overflow vulnerability (CVE-2026-84268) exists in the SFTP backend of gvfs. This flaw occurs when a malicious SFTP server sends a length value exceeding the allocated buffer size during file read operations, causing memory corruption. The issue can lead to denial of service or potentially arbitrary code execution in the gvfsd-sftp process. Red Hat has released security updates for Red Hat Enterprise Linux 8 and 10 to address this vulnerability.
AI Analysis
Technical Summary
CVE-2026-84268 is a heap-based buffer overflow in the read_reply() function of the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can provide a length parameter that exceeds the buffer size allocated by the client. The function does not verify this length against the buffer size, resulting in a write past the buffer boundary and adjacent heap memory corruption. This can cause the gvfsd-sftp process to abort (denial of service) or potentially allow arbitrary code execution. Red Hat has issued security advisories RHSA-2026:73997 and RHSA-2026:73998 providing patches for Red Hat Enterprise Linux 8 and 10 respectively.
Potential Impact
The vulnerability allows a malicious SFTP server to corrupt heap memory in the gvfsd-sftp process. This can cause the process to abort, resulting in denial of service, or potentially enable arbitrary code execution. The CVSS v3.1 base score is 8.8 (high severity) with impact on confidentiality, integrity, and availability.
Mitigation Recommendations
Red Hat has released official security updates addressing this vulnerability for Red Hat Enterprise Linux 8 and 10. Users should apply the patches provided in advisories RHSA-2026:73997 and RHSA-2026:73998. Refer to https://access.redhat.com/articles/11258 for update instructions. No additional mitigation steps are required beyond applying these official fixes.
A flaw was found in the SFTP backend in gvfs. (CVE-2026-84268)
Description
A heap-based buffer overflow vulnerability (CVE-2026-84268) exists in the SFTP backend of gvfs. This flaw occurs when a malicious SFTP server sends a length value exceeding the allocated buffer size during file read operations, causing memory corruption. The issue can lead to denial of service or potentially arbitrary code execution in the gvfsd-sftp process. Red Hat has released security updates for Red Hat Enterprise Linux 8 and 10 to address this vulnerability.
CVSS v3.1
Score 8.8high
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-84268 is a heap-based buffer overflow in the read_reply() function of the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can provide a length parameter that exceeds the buffer size allocated by the client. The function does not verify this length against the buffer size, resulting in a write past the buffer boundary and adjacent heap memory corruption. This can cause the gvfsd-sftp process to abort (denial of service) or potentially allow arbitrary code execution. Red Hat has issued security advisories RHSA-2026:73997 and RHSA-2026:73998 providing patches for Red Hat Enterprise Linux 8 and 10 respectively.
Potential Impact
The vulnerability allows a malicious SFTP server to corrupt heap memory in the gvfsd-sftp process. This can cause the process to abort, resulting in denial of service, or potentially enable arbitrary code execution. The CVSS v3.1 base score is 8.8 (high severity) with impact on confidentiality, integrity, and availability.
Mitigation Recommendations
Red Hat has released official security updates addressing this vulnerability for Red Hat Enterprise Linux 8 and 10. Users should apply the patches provided in advisories RHSA-2026:73997 and RHSA-2026:73998. Refer to https://access.redhat.com/articles/11258 for update instructions. No additional mitigation steps are required beyond applying these official fixes.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-8cxg-v7p7-qc7j
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-84268"]
- Database Specific Severity
- HIGH
- Cvss Version
- 3.1
- State
- PUBLISHED
Patch Information
Threat ID: 6abeb3efa43b0b3b89ed4722
Added to database: 10/01/2026, 19:26:39 UTC
Last enriched: 10/01/2026, 19:32:18 UTC
Last updated: 10/01/2026, 20:26:14 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.