Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
A stack-based buffer overflow vulnerability (CWE-121) exists in libsolv's Debian metadata parser when processing specially crafted SHA384 or SHA512 checksum tags. This flaw can cause memory corruption and lead to a denial of service (DoS) by crashing the affected system. Exploitation requires processing untrusted Debian repository metadata with malicious checksum tags. The vulnerability is rated medium severity and is not typically exposed in default Red Hat product configurations. Mitigation involves ensuring only trusted and cryptographically signed Debian repository metadata is processed.
AI Analysis
Technical Summary
CVE-2026-9150 is a stack-based buffer overflow vulnerability in libsolv's Debian metadata parser. It occurs when specially crafted Debian repository metadata containing malicious SHA384 or SHA512 checksum tags is processed, causing memory corruption and a denial of service. While memory corruption is confirmed, reliable system compromise has not been demonstrated. Exploitation requires the victim system to process untrusted Debian repository metadata. The vulnerability affects Red Hat Hardened Images RPMs including various libsolv packages for aarch64 and x86_64 architectures. Red Hat classifies this as a moderate impact issue with a CVSS 3.1 base score of 6.5 (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H).
Potential Impact
The vulnerability can cause denial of service through a stack-based buffer overflow leading to memory corruption and system crashes. There is no evidence of reliable code execution or system compromise. The flaw requires processing of maliciously crafted Debian repository metadata, which is not typical in default Red Hat configurations. Therefore, the impact is primarily availability degradation (DoS).
Mitigation Recommendations
Red Hat advises ensuring that libsolv only processes trusted and cryptographically signed Debian repository metadata. Avoid ingesting or processing 'Packages' files from untrusted or unverified sources. No official patch or fix is currently provided in the advisory; patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Following the vendor guidance to restrict metadata sources effectively mitigates the risk.
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Description
A stack-based buffer overflow vulnerability (CWE-121) exists in libsolv's Debian metadata parser when processing specially crafted SHA384 or SHA512 checksum tags. This flaw can cause memory corruption and lead to a denial of service (DoS) by crashing the affected system. Exploitation requires processing untrusted Debian repository metadata with malicious checksum tags. The vulnerability is rated medium severity and is not typically exposed in default Red Hat product configurations. Mitigation involves ensuring only trusted and cryptographically signed Debian repository metadata is processed.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-9150 is a stack-based buffer overflow vulnerability in libsolv's Debian metadata parser. It occurs when specially crafted Debian repository metadata containing malicious SHA384 or SHA512 checksum tags is processed, causing memory corruption and a denial of service. While memory corruption is confirmed, reliable system compromise has not been demonstrated. Exploitation requires the victim system to process untrusted Debian repository metadata. The vulnerability affects Red Hat Hardened Images RPMs including various libsolv packages for aarch64 and x86_64 architectures. Red Hat classifies this as a moderate impact issue with a CVSS 3.1 base score of 6.5 (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H).
Potential Impact
The vulnerability can cause denial of service through a stack-based buffer overflow leading to memory corruption and system crashes. There is no evidence of reliable code execution or system compromise. The flaw requires processing of maliciously crafted Debian repository metadata, which is not typical in default Red Hat configurations. Therefore, the impact is primarily availability degradation (DoS).
Mitigation Recommendations
Red Hat advises ensuring that libsolv only processes trusted and cryptographically signed Debian repository metadata. Avoid ingesting or processing 'Packages' files from untrusted or unverified sources. No official patch or fix is currently provided in the advisory; patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Following the vendor guidance to restrict metadata sources effectively mitigates the risk.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:30649
- Cve Count
- 1
- Additional Cves
- []
- Cvss Version
- null
Threat ID: 6a42ed3027e9c79719934e32
Added to database: 06/29/2026, 22:09:52 UTC
Last enriched: 08/09/2026, 15:45:49 UTC
Last updated: 08/13/2026, 00:41:14 UTC
Views: 122
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.