Description
Loki queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Grafana | Loki | v3.0.0 – < v3.7.0 | v3.7.0 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Hardened Images 1 | loki3.6 +2 | 3.6.17-0.3.hum1 | RHSA-2026:72570 |
Advisories 2
- RHSA-2026:72570 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- WID-SEC-2026-2391 Grafana Loki: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Jul 16, 2026
References
- https://grafana.com/security/security-advisories/cve-2026-21729 vendor-advisory