PT-2026-90049

CVE-2026-89329

·

تاريخ النشر

2026-09-11

·

تاريخ التحديث

2026-09-30

الوصف من

CVSS 3.1
6.2
متوسطة
المقاييسAV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions multipathd (affected versions not specified)
Description A flaw exists in multipathd where a local attacker with access to the multipathd UNIX control socket can trigger a Denial of Service (DoS). By sending valid commands and subsequently stopping the reading of replies, the attacker can cause the multipathd listener thread to block. This results in legitimate Inter-Process Communication (IPC) operations hanging or timing out. IPC is a mechanism that allows different processes to communicate and synchronize their actions. This issue does not allow for privilege escalation, arbitrary code execution, or the compromise of data confidentiality and integrity.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
AZL-101727
OESA-2026-4156
OESA-2026-4157
OESA-2026-4158
OESA-2026-4159
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾