Skip to content
OpenAdvisories
Medium · 5.3 Public exploit CVE-2026-4893 EUVD-2026-29155GHSA-4rrv-pmrh-2vc4

CVE-2026-4893

Published May 11, 2026 · Updated May 20, 2026 · Assigned by certcc

Vendor: dnsmasq Product: dnsmasq Package: dnsmasq Package: dnsmasq Package: dnsmasq Package: dnsmasq Package: dnsmasq Package: dnsmasq-doc Ecosystem: Alpine Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Ubuntu Ecosystem: Wolfi

Description

An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client subnet information.

Affected products

VendorProductAffectedFixed
dnsmasq dnsmasq < 2.92rel2 2.92rel2

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 dnsmasq 2.92-5 —
Debian 13 dnsmasq 2.91-1+deb13u1 —
Debian 12 dnsmasq 2.90-4~deb12u2 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.04 LTS dnsmasq 2.92-1ubuntu0.2 —
Ubuntu 25.10 dnsmasq 2.91-1ubuntu0.2 —
Ubuntu 24.04 LTS dnsmasq 2.90-2ubuntu0.3 —
Ubuntu 22.04 LTS dnsmasq 2.90-0ubuntu0.22.04.3 —
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 20.04 LTS dnsmasq 2.90-0ubuntu0.20.04.1+esm2 —
Ubuntu Pro 18.04 LTS dnsmasq 2.90-0ubuntu0.18.04.1+esm3 —
Ubuntu Pro 16.04 LTS dnsmasq 2.90-0ubuntu0.16.04.1+esm3 —
Ubuntu Pro 14.04 LTS dnsmasq 2.68-1ubuntu0.2+esm5 —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 10 dnsmasq +1 2.90-7.el10_2 RHSA-2026:19158
RHEL 9 dnsmasq +1 2.85-18.el9_8.1 RHSA-2026:19373
RHEL 8 dnsmasq +1 2.79-36.el8_10 RHSA-2026:20589
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 9.6 EUS dnsmasq +1 2.85-17.el9_6.1 RHSA-2026:34508

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 10 dnsmasq +1 2.90-7.el10_2 ALSA-2026:19158
AlmaLinux 9 dnsmasq +1 2.85-18.el9_8.1 ALSA-2026:19373
AlmaLinux 8 dnsmasq +1 2.79-36.el8_10 ALSA-2026:20589

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 10 dnsmasq 2.90-7.el10_2 RLSA-2026:19158
Rocky Linux 9 dnsmasq 2.85-18.el9_8.1 RLSA-2026:19373
Rocky Linux 8 dnsmasq 2.79-36.el8_10 RLSA-2026:20589

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 12 SP5 dnsmasq 2.92rel2-18.27.1 SUSE-SU-2026:2458-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed dnsmasq 2.92rel2-1.1 openSUSE-SU-2026:10821-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 dnsmasq 2.92_p2-r0 —
Alpine v3.23 dnsmasq 2.91-r1 —
Alpine v3.22 dnsmasq 2.91-r1 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 dnsmasq +1 2.90-1.amzn2023.0.3 ALAS2023-2026-1729
Amazon Linux 2 dnsmasq +1 2.76-16.amzn2.1.6 ALAS2-2026-3318

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 dnsmasq 2.92-1 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 10 dnsmasq +1 2.90-7.el10_2 ELSA-2026-19158
Oracle Linux 9 dnsmasq +1 2.85-18.el9_8.1 ELSA-2026-19373
Oracle Linux 8 dnsmasq +1 2.79-36.el8_10 ELSA-2026-20589

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling dnsmasq +1 2.93-r0 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 20

References