CVE-2026-32792 is a denial of service vulnerability in Unbound DNS resolver when compiled with DNSCrypt support. A remote attacker can send a crafted DNSCrypt query that causes Unbound to read beyond allocated memory, resulting in a heap overflow and service crash. The exploitation likelihood is low due to reliance on specific memory layouts and subsequent packet checks. This vulnerability affects Red Hat Hardened Images RPMs containing Unbound components. Red Hat has not provided a patch or effective mitigation at this time.

Successful exploitation causes a denial of service by crashing the Unbound service. There is no impact on confidentiality or integrity. The attack requires network access but no privileges or user interaction. The likelihood of a crash is low due to internal checks and memory layout dependencies.

Currently, no mitigation is available or meets Red Hat's criteria for ease of use, deployment, applicability, or stability. Users should monitor Red Hat advisories for updates. Upgrading to a fixed version when available is recommended. Customers with Red Hat Technical Account Managers can seek direct guidance. No official fix has been released yet.