Search: CVE-2026-4892

A heap-based out-of-bounds write vulnerability exists in the DHCPv6 implementation of dnsmasq, allowing local attackers to execute arbitrary code with root privileges via crafted DHCPv6 packets. This vulnerability is identified as CVE-2026-4892 and is part of multiple security issues addressed in recent dnsmasq updates. Red Hat has released security advisories providing patches for affected Red Hat Enterprise Linux 9 and 10 versions. The vulnerability has a high severity rating and a CVSS vector indicating local attack complexity with no privileges required and high impact on confidentiality, integrity, and availability.