CVE-2026-95508: Red Hat Enterprise Linux 10

High severity, CVSS 7.4. EPSS: 0.6% chance of exploitation in the next 30 days.

A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp. When the host is configured with a small interface MTU, a guest-supplied DHCPv6 CLIENTID option or TFTP blksize option can overflow the reply buffer with attacker-controlled content and length, resulting in denial of service and potentially arbitrary code execution in the host process. The default interface MTU is not affected.

Affected products

• Red Hat Red Hat Enterprise Linux 10
• Red Hat Red Hat Enterprise Linux 8
• Red Hat Red Hat Enterprise Linux 9
• Red Hat Red Hat Openshift Container Platform 4

Published 2026-09-22. Last modified 2026-09-22.