CVE-2026-93007

Name of the Vulnerable Software and Affected Versions dnsmasq versions prior to 2.93-3.1

Description The TCP DNS service utilizes a small fixed pool of child processes and fails to implement a receive timeout on client connections. A remote attacker can exhaust this pool by opening idle TCP connections to port 53, which prevents new TCP DNS connections and disrupts DNSSEC validation that relies on TCP fallback. UDP DNS resolution remains functional, and the occupied slots are released after a fixed lifetime.

Recommendations Update to version 2.93-3.1.