PT-2026-39700

CVE-2026-4892

·

Published

2026-05-09

·

Updated

2026-10-24

Description by

CVSS 3.1
8.8
High
MetricsAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions dnsmasq (affected versions not specified)
Description A heap-based out-of-bounds write in the DHCPv6 implementation allows local attackers to execute arbitrary code with root privileges by sending a crafted DHCPv6 packet. A heap-based out-of-bounds write occurs when a program writes data past the end of a memory buffer allocated on the heap, which can lead to memory corruption.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
ALSA-2026:19158
ALSA-2026:19373
ALSA-2026:20589
CLEANSTART-2026-CP78946
CLEANSTART-2026-KY78316
CLSA-2026-1792817189
CLSA-2026-1792817408
OESA-2026-2435
OESA-2026-2436
OESA-2026-2437
OESA-2026-2438
OESA-2026-2509
OPENSUSE-SU-2026:10821-1
OPENSUSE-SU-2026:20748-1
RHSA-2026:19158
RHSA-2026:19373
RHSA-2026:34508
SUSE-SU-2026:1934-1
SUSE-SU-2026:21640-1
SUSE-SU-2026:21677-1
SUSE-SU-2026:21733-1
SUSE-SU-2026:21788-1
SUSE-SU-2026:2458-1
USN-8268-1
Found an issue in the description? Have something to add? Feel free to write us 👾