This vulnerability involves a stack-based buffer overflow in the rpcinfo utility of rpcbind on Red Hat Enterprise Linux 10. When rpcinfo queries a remote rpcbind service using the '-l' option, the address information returned by the server is copied into a fixed-size buffer without sufficient bounds checking. A malicious or compromised rpcbind server could exploit this to crash the rpcinfo client, causing a denial of service. The CVSS 3.1 base score is 6.5 (medium severity), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, no confidentiality or integrity impact, and high impact on availability. There is no vendor advisory content indicating a patch or mitigation, and no known exploits in the wild have been reported.

Successful exploitation results in a denial of service condition by crashing the rpcinfo client. There is no impact on confidentiality or integrity. The highest threat is to system availability.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-16277 for current remediation guidance. No official fix or workaround is currently documented. Until a patch is available, avoid querying untrusted or potentially malicious rpcbind servers with 'rpcinfo -l' to reduce risk.