Skip to content
OpenAdvisories
High RHSA-2026:7342 1 CVE

Red Hat Security Advisory: kea security update

Published Apr 10, 2026 · Updated Jun 30, 2026

Ecosystem: Red Hat

Fixed packages 11

ReleasePackageFixed in
Red Hat · RHEL 10 enterprise_linux:10.1 kea 0:3.0.1-3.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kea-debuginfo 0:3.0.1-3.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kea-debugsource 0:3.0.1-3.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kea-devel-debuginfo 0:3.0.1-3.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kea-doc 0:3.0.1-3.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kea-hooks 0:3.0.1-3.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kea-hooks-debuginfo 0:3.0.1-3.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kea-keama 0:3.0.1-3.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kea-keama-debuginfo 0:3.0.1-3.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kea-libs 0:3.0.1-3.el10_1
Red Hat · RHEL 10 enterprise_linux:10.1 kea-libs-debuginfo 0:3.0.1-3.el10_1

Vulnerabilities 1

  • High 7.5
    CVE-2026-3608

    Stack overflow in Kea daemons

    Sending a maliciously crafted message to the kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, or kea-dhcp6 daemons over any configured API socket or HA listener can cause the receiving daemon to exit with a stack overflow error. This issue affects Kea versions 2.6.0…

    ISC Kea isc-kea kea Debian Ubuntu Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2451139
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7342.json
  • report
    https://access.redhat.com/security/cve/CVE-2026-3608
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-3608
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-3608
  • article
    https://downloads.isc.org/isc/kea/2.6.5
  • article
    https://downloads.isc.org/isc/kea/3.0.3
  • article
    https://kb.isc.org/docs/cve-2026-3608