PT-2026-90049

CVE-2026-89329

·

Published

2026-09-11

·

Updated

2026-09-30

Description by

CVSS 3.1
6.2
Medium
MetricsAV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions multipathd (affected versions not specified)
Description A flaw exists in multipathd where a local attacker with access to the multipathd UNIX control socket can trigger a Denial of Service (DoS). By sending valid commands and subsequently stopping the reading of replies, the attacker can cause the multipathd listener thread to block. This results in legitimate Inter-Process Communication (IPC) operations hanging or timing out. IPC is a mechanism that allows different processes to communicate and synchronize their actions. This issue does not allow for privilege escalation, arbitrary code execution, or the compromise of data confidentiality and integrity.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
AZL-101727
OESA-2026-4156
OESA-2026-4157
OESA-2026-4158
OESA-2026-4159
Found an issue in the description? Have something to add? Feel free to write us 👾