CVE-2026-4892 is a heap buffer overflow vulnerability in the DHCPv6 Client Identifier (CLID) handling within the dnsmasq helper process. This flaw allows a local attacker to cause an out-of-bounds write on the heap, potentially leading to arbitrary code execution with root privileges. The vulnerability is one of several addressed in recent Red Hat security advisories for dnsmasq packages on Red Hat Enterprise Linux 9 and 10. The advisories provide updated dnsmasq package versions that fix this and related vulnerabilities. The CVSS 3.1 vector is AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating a local attack vector with low complexity and no privileges required, resulting in high impact on confidentiality, integrity, and availability.

Successful exploitation of this heap-based out-of-bounds write vulnerability can lead to arbitrary code execution with root privileges on affected systems. This compromises system confidentiality, integrity, and availability. The vulnerability requires local access and crafted DHCPv6 packets to trigger the flaw. There are no known exploits in the wild at the time of the advisory.

Red Hat has released official security updates for dnsmasq that address CVE-2026-4892 along with other related vulnerabilities. Users of Red Hat Enterprise Linux 9 and 10 should apply the dnsmasq package updates provided in advisories RHSA-2026:19158 and RHSA-2026:19373. Detailed update instructions are available at https://access.redhat.com/articles/11258. Applying these updates fully mitigates the vulnerability. No additional immediate actions are required beyond patching.