CVE-2026-10822

Name of the Vulnerable Software and Affected Versions BIND 9 versions 9.18.0 through 9.18.50 BIND 9 versions 9.20.0 through 9.20.24 BIND 9 versions 9.21.0 through 9.21.23 BIND 9 versions 9.18.11-S1 through 9.18.50-S1 BIND 9 versions 9.20.9-S1 through 9.20.24-S1

Description An issue occurs when the software encounters a specific invalid data structure in a DNS record. If a key record (such as KEY or DNSKEY) specifies a PRIVATEDNS algorithm (253) and provides an algorithm identifier length that is longer than the actual identifier data, the invalid identifier is stored. When the software subsequently attempts to render that record to text, it uses the invalid length during processing, which causes a consistency check to fail and may lead the application to abort and exit.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.