Red Hat Security Advisory: frr10 security, bug fix, and enhancement update
A denial of service vulnerability (CVE-2026-37460) exists in FRRouting (frr10) via a crafted BGP UPDATE message. FRRouting is a routing software supporting multiple protocols including BGP4. Red Hat has issued an important security advisory with an update for Red Hat Enterprise Linux 9 to address this issue. The update also fixes SELinux denials related to Python site-packages on RHEL-9. No CVSS score is provided, but the vulnerability is rated as high severity by Red Hat. The advisory includes updated packages for various RHEL 9 architectures and extended update support versions.
AI Analysis
Technical Summary
FRRouting (frr10) contains a denial of service vulnerability identified as CVE-2026-37460, which can be triggered by a specially crafted BGP UPDATE message. This vulnerability affects the FRRouting software used in Red Hat Enterprise Linux 9 and its extended update support versions across multiple architectures (x86_64, s390x, ppc64le, aarch64). Red Hat has released updated packages (frr10-10.4.3-3.el9_8.2) that fix this issue. Additionally, the update resolves SELinux denials when reading root's Python site-packages directory on RHEL-9. The advisory is classified as important by Red Hat Product Security. No CVSS score is provided in the advisory, and no known exploits in the wild have been reported.
Potential Impact
Successful exploitation of CVE-2026-37460 could cause a denial of service condition in FRRouting by processing a crafted BGP UPDATE message. This could disrupt routing services on affected systems running FRRouting. The advisory does not report any known exploits in the wild. The issue affects Red Hat Enterprise Linux 9 and its extended update support variants on multiple hardware architectures.
Mitigation Recommendations
Red Hat has released an official security update for FRRouting (frr10) in Red Hat Enterprise Linux 9 and its extended update support versions. Applying the updated packages (frr10-10.4.3-3.el9_8.2) will remediate the denial of service vulnerability. Users should follow Red Hat's update instructions as detailed in https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor advisory.
Red Hat Security Advisory: frr10 security, bug fix, and enhancement update
Description
A denial of service vulnerability (CVE-2026-37460) exists in FRRouting (frr10) via a crafted BGP UPDATE message. FRRouting is a routing software supporting multiple protocols including BGP4. Red Hat has issued an important security advisory with an update for Red Hat Enterprise Linux 9 to address this issue. The update also fixes SELinux denials related to Python site-packages on RHEL-9. No CVSS score is provided, but the vulnerability is rated as high severity by Red Hat. The advisory includes updated packages for various RHEL 9 architectures and extended update support versions.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
FRRouting (frr10) contains a denial of service vulnerability identified as CVE-2026-37460, which can be triggered by a specially crafted BGP UPDATE message. This vulnerability affects the FRRouting software used in Red Hat Enterprise Linux 9 and its extended update support versions across multiple architectures (x86_64, s390x, ppc64le, aarch64). Red Hat has released updated packages (frr10-10.4.3-3.el9_8.2) that fix this issue. Additionally, the update resolves SELinux denials when reading root's Python site-packages directory on RHEL-9. The advisory is classified as important by Red Hat Product Security. No CVSS score is provided in the advisory, and no known exploits in the wild have been reported.
Potential Impact
Successful exploitation of CVE-2026-37460 could cause a denial of service condition in FRRouting by processing a crafted BGP UPDATE message. This could disrupt routing services on affected systems running FRRouting. The advisory does not report any known exploits in the wild. The issue affects Red Hat Enterprise Linux 9 and its extended update support variants on multiple hardware architectures.
Mitigation Recommendations
Red Hat has released an official security update for FRRouting (frr10) in Red Hat Enterprise Linux 9 and its extended update support versions. Applying the updated packages (frr10-10.4.3-3.el9_8.2) will remediate the denial of service vulnerability. Users should follow Red Hat's update instructions as detailed in https://access.redhat.com/articles/11258. No additional mitigation steps are indicated by the vendor advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:49607
- Cve Count
- 1
- Additional Cves
- []
- Cvss Version
- null
Threat ID: 6a71066cbf32cb7a343952af
Added to database: 08/03/2026, 21:21:48 UTC
Last enriched: 08/03/2026, 21:34:41 UTC
Last updated: 08/04/2026, 00:29:02 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.