CVE-2026-115486: Out-of-bounds Read in Red Hat Red Hat Enterprise Linux 10

This vulnerability affects the iscsiuio component of open-iscsi in Red Hat Enterprise Linux 10. The IPv6 Neighbor Discovery handler improperly accesses link-layer address options at a fixed offset without validating that the packet contains these options, leading to an out-of-bounds read. Furthermore, the ARP table is updated without validation using addresses from packet headers controlled by an attacker. This flaw enables an attacker on the same network segment to send a minimal Neighbor Advertisement to poison the ARP table, potentially redirecting network traffic.

An attacker on the same network segment can exploit this vulnerability to poison the ARP table, causing network traffic redirection. This can lead to interception or manipulation of network communications. The CVSS score of 7.1 indicates a high severity impact with no confidentiality impact but high integrity impact and low availability impact.

Patch status is not yet confirmed — check the vendor advisory at https://access.redhat.com/security/cve/CVE-2026-115486 for current remediation guidance. Until a fix is applied, network administrators should consider network segmentation or monitoring for suspicious Neighbor Advertisement packets to mitigate potential exploitation.