PT-2026-90049
CVE-2026-89329
·
تاريخ النشر
2026-09-11
·
تاريخ التحديث
2026-09-30
الوصف من
CVSS 3.1
6.2
متوسطةالمقاييسAV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
multipathd (affected versions not specified)
Description
A flaw exists in
multipathd where a local attacker with access to the multipathd UNIX control socket can trigger a Denial of Service (DoS). By sending valid commands and subsequently stopping the reading of replies, the attacker can cause the multipathd listener thread to block. This results in legitimate Inter-Process Communication (IPC) operations hanging or timing out. IPC is a mechanism that allows different processes to communicate and synchronize their actions. This issue does not allow for privilege escalation, arbitrary code execution, or the compromise of data confidentiality and integrity.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾