Critical Denial of Service Vulnerability in Kea DHCP Affects Ubuntu Systems

Linuxsecurity

Critical Denial of Service Vulnerability in Kea DHCP Affects Ubuntu Systems

First seen 8 Jun 2026, 22:52 UTC • •60.6

Article Content

1 / 3

Browse articles

ThreatCluster •June 9, 2026 at 22:30 UTC

•Kea DHCP vulnerability allows remote denial of service attacks on affected Ubuntu systems.
•The flaw affects Ubuntu versions 25.10 and 24.04 LTS, requiring urgent updates.
•Users must restart Kea DHCP server instances post-update to ensure security.

A vulnerability in Kea DHCP, discovered by Ali Norouzi, allows remote attackers to crash the service by sending specially crafted messages over API sockets and HA listeners. This flaw affects Ubuntu versions 25.10 and 24.04 LTS, leading to a denial of service. The issue can be mitigated by updating to specific package versions. Users are advised to restart their Kea DHCP server instances after applying the updates. The vulnerability is documented under Ubuntu Security Notice USN-8403-1. No CVE has been assigned yet, but the issue poses a significant risk to systems running affected versions. The problem was disclosed on June 8, 2026.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 104d ago How this analysis works

Timeline

2026-06-08

Kea DHCP vulnerability disclosed

Ali Norouzi reported a flaw in Kea DHCP that allows remote denial of service attacks via crafted messages.

2026-06-08

Ubuntu Security Notice USN-8403-1 issued

Ubuntu released an advisory detailing the Kea DHCP vulnerability and recommended updates for affected versions.

More articles in this cluster (2)

Threat Graph

7 entities, 8 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (2)

DDoS
Denial of Service

Organization (1)

Ubuntu

Weakness (1)

Cwe-400 - Uncontrolled Resource Consumption

Affected Platform (2)

Kea DHCP
Ubuntu Pro

Vulnerability (1)

Kea DHCP Vulnerability

Relationships

Kea DHCP Vulnerability targets Kea DHCP
Kea DHCP Vulnerability targets Ubuntu Pro
DDoS targets Kea DHCP
DDoS targets Ubuntu Pro
Denial of Service targets Kea DHCP
Denial of Service targets Ubuntu Pro
Kea DHCP Vulnerability related to Ubuntu
Kea DHCP Vulnerability related to Cwe-400 - Uncontrolled Resource Consumption

Following this threat?

Track Ubuntu in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical WSO2 API Manager Vulnerability Under Active Exploitation A critical vulnerability (CVE-2026-5430) in WSO2 API Manager is being actively exploited, allowing unauthenticated attackers to forge admin tokens via JWT authentication bypass. This flaw, which has a CVSS score of 10.0, affects multiple WSO2 products including API Manager, Universal Gateway, Traffic Manager, and API…

Critical Linux Kernel Vulnerability CVE-2025-39682 Under Active Exploitation A critical vulnerability (CVE-2025-39682) in the Linux kernel allows remote code execution through mishandling of zero-length TLS records. This flaw affects kTLS-enabled hosts running vulnerable kernel versions, exposing them to attackers without authentication. CISA added this vulnerability to its Known Exploited…