Loading story…
Red Hat released Important-severity updates for CVE-2026-55995, a double-free vulnerability in the iSNS attribute decoder used by open-isns/open-iscsi. An unauthenticated man-in-the-middle attacker could exploit the flaw to crash affected services and cause a denial of service; upstream versions through commit 56718d4e9d1a4f51c30697b5c0534144bb41c9bb are affected.
The fixes are available in isns-utils-0.101-4.el9_6.1 for RHEL 9.6 service variants and isns-utils-0.103-1.el10_0.1 for RHEL 10.0, covering x86_64, ARM64/aarch64, IBM Z/s390x, and Power ppc64le platforms. Organizations running affected RHEL systems, including SAP, telecommunications, extended-support, and lifecycle-support deployments, should apply the relevant Red Hat updates.
See real exploitation activity before you spend the cycle.
10 events from the most recent confirmed update back to the earliest known activity.
Alibaba Cloud Linux 3 published ALINUX3-SA-2026:0260, updating affected isns-utils, isns-utils-devel, and isns-utils-libs packages to remediate CVE-2026-55995. The vulnerability is network-accessible without privileges or user interaction and can cause high availability impact.
Red Hat issued Important-severity advisory RHSA-2026:61249 for RHEL 8, updating affected isns-utils, isns-utils-libs, and isns-utils-devel packages to remediate CVE-2026-55995. The remotely reachable unauthenticated double-free flaw in the open-isns/open-iscsi iSNS attribute decoder can cause denial of service.
Unity Linux published advisory UTSA-2026-104845, directing users to update the affected isns-utils package to remediate CVE-2026-55995. The advisory describes the flaw as an unauthenticated man-in-the-middle double-free vulnerability in open-iscsi that can cause denial of service.
Red Hat issued Important-severity advisory RHSA-2026:60385 to remediate CVE-2026-55995 in isns-utils, isns-utils-libs, and isns-utils-devel on affected RHEL 8 and RHEL AUS 8.6 systems. The vulnerability is an unauthenticated network-reachable double-free denial-of-service flaw in the open-isns/open-iscsi iSNS attribute decoder.
Red Hat issued Important-severity advisory RHSA-2026:59999 to update isns-utils on affected RHEL 9 systems and remediate CVE-2026-55995, a remotely exploitable unauthenticated double-free denial-of-service flaw in the open-iSNS attribute decoder.
Red Hat issued Important-severity advisory RHSA-2026:60005, releasing isns-utils 0.103-1.el10_0.1 to remediate CVE-2026-55995 for RHEL 10.0 support offerings.
Red Hat issued Important-severity advisory RHSA-2026:59996 to remediate CVE-2026-55995 in affected isns-utils packages on RHEL E4S 9.4. The flaw is a network-reachable double-free denial-of-service vulnerability in the open-isns/open-iscsi iSNS attribute decoder.
Red Hat issued Important-severity advisory RHSA-2026:60006, releasing isns-utils 0.101-4.el9_6.1 and associated libraries to remediate CVE-2026-55995 for RHEL 9.6 service variants.
TencentOS Server 3 published a patch for its affected isns-utils package to remediate CVE-2026-55995, a remotely exploitable unauthenticated vulnerability with high availability impact.
Red Hat documented CVE-2026-55995, a double-free in the open-isns/open-iscsi iSNS attribute decoder that an unauthenticated man-in-the-middle attacker can exploit to cause denial of service. The upstream fix was identified as commit 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
11 references tracked. Mallory keeps watching after this page renders.
tenable.com
Open sourcetenable.com
Open sourcetenable.com
Open sourcetenable.com
Open sourcetenable.com
Open sourceaccess.redhat.com
Open sourcebugzilla.redhat.com
Open sourcecwe.mitre.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat has documented multiple **CWE-772** resource-management flaws that can exhaust memory or device references and cause denial of service. In the Linux kernel, `CVE-2022-50269` leaks a configuration object if VKMS initialization fails; `CVE-2022-50318` leaks PCI-device references in Intel uncore performance-monitoring code; and `CVE-2022-50372` leaks a CIFS/SMB session-setup request when NTLMSSP negotiate-blob construction fails. Each kernel issue is rated CVSS 5.5 and requires local, low-privileged access to trigger resource exhaustion. Fixes are available for affected RHEL kernel packages, including RHEL 8 for the CIFS issue under **RHSA-2024:5101**, while some RHEL 9 and real-time kernel fixes remain deferred; unsupported branches are generally unaffected where the vulnerable code is absent. Separately, `CVE-2024-2398` affects curl/libcurl HTTP/2 server-push handling: a remote server can repeatedly send oversized pushed headers and cause leaked header memory when libcurl aborts the push. Rated CVSS 7.5, that flaw was fixed for affected JBoss Core Services HTTPD 2.4 components on RHEL 7 and 8 in **RHSA-2024:2693**.
Aug 27, 2026
Red Hat released security updates for **CVE-2026-14164**, a Moderate-severity double-free flaw in `libarchive`'s RAR5 decompression logic. The bug stems from a dangling `filtered_buf` pointer in `init_unpack()` within `archive_read_support_format_rar5.c`, allowing a specially crafted RAR5 archive to trigger a second free of the same memory. Red Hat said the issue can crash affected applications and cause **denial of service**, with impact centered on availability rather than confidentiality or integrity. The vendor published multiple advisories covering **RHEL 9** support streams, including **RHSA-2026:58558** for RHEL 9.6, **RHSA-2026:58573** for RHEL 9.4 channels, and **RHSA-2026:58574** for RHEL 9.2 SAP and lifecycle variants, with updated `libarchive` packages released across `x86_64`, `aarch64`, `ppc64le`, and `s390x`. Red Hat's bug tracking also said fixes extend to other products, including **RHEL 10** and **OpenShift Container Platform 4.22**. Tenable published a Nessus detection plugin for exposed RHEL 9 systems and noted that, at publication, no known exploits were available.
Aug 24, 2026
Red Hat released **Important** glibc security updates for Red Hat Enterprise Linux 7, 8, and 9—including extended, advanced-update, and extended-lifecycle support channels—to remediate `CVE-2024-2961`. The flaw affects the `ISO-2022-CN-EXT` `iconv` conversion module: incomplete internal-buffer checks for SS2 and SS3 charset-switch escape sequences during UCS-4 conversion can write one to three bytes beyond the intended buffer. Red Hat assigned the issue a CVSS v3.1 score of 8.8; successful exploitation may cause memory corruption, denial of service, privilege escalation, or remote code execution depending on the calling application and conditions. The updates also resolve four glibc/nscd netgroup-cache vulnerabilities, including a stack-based buffer overflow, null-pointer dereferences, allocation-failure daemon termination, and unsafe handling of NSS callback strings. Administrators should deploy the updated glibc packages across affected x86_64, ARM64/aarch64, IBM Z/s390x, and IBM Power architectures, then restart all glibc-linked services or reboot hosts. Where patching cannot be performed immediately, Red Hat recommends disabling the vulnerable `ISO-2022-CN-EXT` gconv module and rebuilding the `iconv` cache; fixes were also issued for OpenShift Container Platform 4.12 through 4.16.
Aug 27, 2026