CVE-2026-73199: NULL Pointer Dereference in Red Hat Red Hat Enterprise Linux 10

This vulnerability exists in the ipa-enrollment SLAPI plugin of Red Hat Enterprise Linux 10. It is triggered when a remote authenticated client sends a malformed LDAP extended operation missing the JOIN_OID request value, causing a null pointer dereference and server crash. The flaw results in a denial of service condition by crashing the LDAP service. The CVSS v3.1 base score is 6.5 (medium severity) with network attack vector, low complexity, and low privileges required. The vulnerability affects availability only, with no impact on confidentiality or integrity. Red Hat's advisory recommends network access restrictions and optionally disabling the ipa-enrollment plugin to mitigate the risk.

The vulnerability allows a remote authenticated attacker to cause a denial of service by crashing the LDAP server process via a null pointer dereference. There is no impact on confidentiality or integrity. No known exploits are reported in the wild. The attack requires authentication and network access to the LDAP service.

Red Hat advises restricting network access to the LDAP service to trusted clients only, for example by configuring firewall rules to allow connections only from known IP addresses or subnets. Additionally, if host enrollment functionality is not required, disabling the ipa-enrollment SLAPI plugin removes the attack surface. No official patch or fix is explicitly stated in the advisory at this time; users should monitor Red Hat's advisory for updates.