Skip to content
OpenAdvisories
High USN-8997-1 1 CVE

net-snmp vulnerability

Published Nov 4, 2026 · Updated Nov 5, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Net-SNMP incorrectly handled newly accepted
connections in the SMUX module. An unauthenticated remote attacker could
possibly use this issue to cause Net-SNMP to block indefinitely,
resulting in a denial of service.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS net-snmp 5.9.1+dfsg-1ubuntu2.10
Ubuntu · 24.04 LTS 24.04:LTS net-snmp 5.9.4+dfsg-1.1ubuntu3.3
Ubuntu · 26.04 LTS 26.04:LTS net-snmp 5.9.4+dfsg-2ubuntu3.1

Vulnerabilities 1

  • High 7.5
    CVE-2026-89147

    Net-SNMP through 5.9.5.2 Denial of Service via Blocking Unauthenticated SMUX Read

    Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smux_accept() performs an unauthenticated blocking read without timeout on newly accepted connections. An unauthenticated remote client can connect to the SMUX listen…

    net-snmp Net-SNMP net-snmp net-snmp Debian Ubuntu Azure Linux Wolfi

References

  • report
    https://ubuntu.com/security/CVE-2026-89147