dhcpcd: Schwachstelle ermöglicht Denial of Service

Summary

Product

Vulnerabilities 1

• Medium 6.5
  CVE-2026-14258

  Dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length ipv6 nd option in router advertisement handling

  A flaw was found in dhcpcd's IPv6 Neighbor Discovery Router Advertisement processing. A specially crafted IPv6 Router Advertisement containing a zero-length Neighbor Discovery option can bypass validation during packet storage and later be reparsed without ad…

  Red Hat Red Hat Enterprise Linux 10 dhcpcd dhcpcd Linux Debian Ubuntu Azure Linux
  Jul 1, 2026

Revision history

1. 2026-08-16 #3

   Neue Updates von Oracle Linux aufgenommen

2. 2026-08-13 #2

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

3. 2026-08-11 #1

   Initiale Fassung

References

• Red Hat Security Advisory RHSA-2026:54210 vom 2026-08-11
  https://access.redhat.com/errata/RHSA-2026:54210
• NIST CVE-2026-14258
  https://nvd.nist.gov/vuln/detail/CVE-2026-14258
• GitHub Issue #415 mit PoC
  https://github.com/NetworkConfiguration/dhcpcd/issues/415
• Rocky Linux Security Advisory RLSA-2026:54210 vom 2026-08-13
  https://errata.build.resf.org/RLSA-2026:54210
• Oracle Linux Security Advisory ELSA-2026-54210 vom 2026-08-15
  https://oss.oracle.com/pipermail/el-errata/2026-August/021592.html