CVE Alert: CVE-2026-115484 – Red Hat

A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read beyond the allocated buffer into adjacent heap memory. An attacker on the same network segment can send a crafted DHCP response to crash the daemon or corrupt its network configuration.

**Risk verdict:** High operational risk for systems using DHCP on iSCSI-managed interfaces; prioritise patching, but available data does not establish active exploitation or priority-one status.

**Why this matters:** A nearby attacker can disrupt the iSCSI management daemon or alter network configuration, potentially interrupting access to storage and dependent services. The likely goal is denial of service or disruption of storage connectivity; the supplied evidence does not indicate a reliable route to data theft or wider compromise.

**Most likely attack path:** An unauthenticated attacker on the same network segment sends a crafted DHCP response; low attack complexity and no user action are required. The issue is bounded to the affected system, so direct lateral movement is not indicated, though disrupted storage can have knock-on effects across dependent workloads.

**Who is most exposed:** Prioritise hosts using iSCSI boot or DHCP-managed iSCSI interfaces, especially where untrusted devices can access the same Layer 2 segment.

Alert on unexpected DHCP offers or responses reaching iSCSI networks.

Monitor iscsiuio crashes, restarts and abnormal termination.

Review host network configuration for unexpected changes or loss of storage paths.

Mitigation and prioritisation

Apply the vendor’s security update when available; validate package status across affected fleets.

Until patched, restrict the segment to trusted systems and DHCP infrastructure.

Use static addressing where DHCP is unnecessary; filter DHCP/BOOTP traffic at network boundaries.

Test changes carefully on boot-from-storage systems to avoid disrupting recovery or storage access.

KEV, SSVC exploitation, PoC and EPSS data were not supplied; verify these before final prioritisation.

A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

If you like the site, please support us on Patreon or Buy Me A Coffee using the buttons below.