Netatalk 2.1.0 through 4.4.2 combines multiple errno values using bitwise OR, resulting in incorrect error codes when multiple error conditions… (CVE-2026-44074)

Netatalk versions 2.1.0 through 4.4.2 contain a vulnerability where multiple errno values are combined using bitwise OR, resulting in incorrect error codes when multiple error conditions happen at the same time. This can cause the software to follow incorrect error-handling paths, potentially allowing a remote attacker to cause minor service disruptions. The CVSS 3.1 score is 3.7 (medium), indicating low impact on confidentiality and integrity but some impact on availability. There are no known exploits in the wild and no patch or remediation information is provided in the source data.

The vulnerability may allow a remote attacker to cause minor service disruption by exploiting incorrect error-handling paths due to erroneous error code combinations. There is no impact on confidentiality or integrity reported. The overall impact is limited to availability with low severity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, monitor vendor communications for updates. No specific mitigation steps are described in the available data.