Back Linuxsecurity

Fedora 42 kea 3.0.3 Denial of Service Fix Details and Updates

Linuxsecurity •LinuxSecurity Advisories • April 8, 2026

DHCP implementation from Internet Systems Consortium, Inc. that features fully functional DHCPv4, DHCPv6 and Dynamic DNS servers. Both DHCP servers fully support server discovery, address assignment, renewal, rebinding and release. The DHCPv6 server supports prefix delegation. Both servers support DNS Update mechanism, using stand-alone DDNS daemon. Update Information : New version 3.0.3 (rhbz#2451141) Fixes CVE-2026-3608 (rhbz#2451621)

DHCP implementation from Internet Systems Consortium, Inc. that features fully

functional DHCPv4, DHCPv6 and Dynamic DNS servers.

Both DHCP servers fully support server discovery, address assignment, renewal,

rebinding and release. The DHCPv6 server supports prefix delegation. Both

servers support DNS Update mechanism, using stand-alone DDNS daemon.

New version 3.0.3 (rhbz#2451141) Fixes CVE-2026-3608 (rhbz#2451621)

* Mon Mar 30 2026 Martin Osvald - 3.0.3-1 - New version 3.0.3 (rhbz#2451141) - Fixes CVE-2026-3608 (rhbz#2451621)

[ 1 ] Bug #2451141 - kea-3.0.3 is available [ 2 ] Bug #2451621 - CVE-2026-3608 kea: Kea: Denial of Service via maliciously crafted message [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-66f19b11e0' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora 42 and 43 Kea 3.0.3 Denial of Service Vulnerability Fix Released On April 8, 2026, two articles reported on the release of version 3.0.3 of the Kea DHCP server, which addresses a critical Denial of Service vulnerability identified as CVE-2026-3608. This vulnerability, published on March 25, 2026, allows attackers to exploit the DHCP server through maliciously crafted messages, potentially disrupting services for affected users. The vulnerability impacts both Fedora 42 and Fedora 43 systems running the Kea DHCP server. Users are advised to upgrade to the patched version 3.0.3 to mitigate the risk. The update can be installed using the 'dnf' package manager with specific commands provided in the articles. The vulnerability's scope includes all systems utilizing the affected DHCP implementation. The articles emphasize the importance of applying the update promptly to avoid service disruptions. 2 sources 58

Extracted Entities

Fedora 42 kea 3.0.3 Denial of Service Fix Details and Updates

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

Platforms (1)