CVE-2026-115484: Out-of-bounds Read in Red Hat Red Hat Enterprise Linux 10

This vulnerability arises from an incorrect length calculation in the DHCPv4 option parser within the iscsiuio component of open-iscsi on Red Hat Enterprise Linux 10. The flaw causes the parser to read beyond the allocated buffer into adjacent heap memory, potentially leading to daemon crashes or network configuration corruption when processing malicious DHCP responses from an attacker on the same network segment.

An attacker on the same network segment can exploit this vulnerability by sending a specially crafted DHCP response, which may cause the iscsiuio daemon to crash or corrupt its network configuration. This results in denial of service and potential disruption of network functionality. The CVSS score of 7.6 reflects a high severity with low attack complexity and no required privileges or user interaction.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-115484 for current remediation guidance. Until an official fix is available, consider restricting DHCP responses to trusted sources on the network segment to reduce exposure.