A vulnerability in sblim-sfcb on Red Hat Enterprise Linux 10 allows a local attacker with system access to exploit unsafe deserialization in the provider-manager's IPC message parsing. By sending a crafted message, the attacker can trigger out-of-bounds memory reads, causing the provider-manager process to terminate and resulting in denial of service. This flaw may also lead to limited information disclosure. Exploitation is constrained by local IPC configuration and socket permissions, limiting broader impact. The vulnerability has a CVSS 3.1 score of 6.6 (medium severity). Red Hat advises restricting access to the local connect socket to mitigate risk. A restart of the sfcbd service may be required after mitigation changes. No official patch or fix has been confirmed in the vendor advisory as of now.

The vulnerability allows a local attacker to cause out-of-bounds memory access in the provider-manager process, leading to its termination and denial of service. There is also potential for limited unintended information disclosure, such as leaking memory contents that could include sensitive data. Exploitation requires local access and depends on IPC socket permissions, which limits the scope of impact. The CVSS score reflects low confidentiality and integrity impact but high availability impact.

Red Hat recommends restricting access to the local connect socket used by sblim-sfcb to prevent untrusted local users from interacting with the provider-manager IPC. Ensuring that only trusted users can reach this socket materially reduces exposure. Consult system documentation to secure local IPC channels and socket permissions for the sblim-sfcb service. A restart of the sfcbd service may be necessary for changes to take effect, which could temporarily disrupt dependent services. No official patch or fix is currently confirmed; monitor the Red Hat advisory for updates.