Skip to content
OpenAdvisories
Medium RHSA-2026:54210 1 CVE

Red Hat Security Advisory: dhcpcd security update

Published Aug 13, 2026 · Updated Aug 13, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · RHEL 10 enterprise_linux:10.2 dhcpcd 0:10.0.6-11.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 dhcpcd-debuginfo 0:10.0.6-11.el10_2
Red Hat · RHEL 10 enterprise_linux:10.2 dhcpcd-debugsource 0:10.0.6-11.el10_2

Vulnerabilities 1

  • Medium 6.5
    CVE-2026-14258

    Dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length ipv6 nd option in router advertisement handling

    A flaw was found in dhcpcd's IPv6 Neighbor Discovery Router Advertisement processing. A specially crafted IPv6 Router Advertisement containing a zero-length Neighbor Discovery option can bypass validation during packet storage and later be reparsed without ad…

    Red Hat Red Hat Enterprise Linux 10 dhcpcd dhcpcd Linux Debian Ubuntu Azure Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2462305
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54210.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-14258
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-14258
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-14258
  • article
    https://github.com/NetworkConfiguration/dhcpcd/commit/75289ca
  • article
    https://github.com/NetworkConfiguration/dhcpcd/issues/415