CVE-2026-37459: Red Hat Enterprise Linux 10

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

An integer underflow in FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted BGP UPDATE message.

Affected products

• Red Hat Red Hat Enterprise Linux 10: before 0:10.4.4-1.el10_2 (fixed in 0:10.4.4-1.el10_2)
• Red Hat Red Hat Enterprise Linux 8
• Red Hat Red Hat Enterprise Linux 9: before 0:10.4.3-3.el9_8 (fixed in 0:10.4.3-3.el9_8)

Published 2026-05-04. Last modified 2026-07-15.