Red HatCVE-2026-89329
Red Hat Enterprise Linux 10: denial of service
Medium6.2CVE-2026-89329 · Published Sep 11, 2026 · updated Sep 16, 2026
A flaw was found in `multipathd`. A local attacker with access to the `multipathd` UNIX control socket can exploit this vulnerability by sending valid commands and then ceasing to read replies. This action can cause the `multipathd` listener thread to block, leading to a Denial of Service (DoS) where legitimate Inter-Process Communication (IPC) operations may hang or time out. This issue does not result in privilege escalation, arbitrary code execution, or impact data confidentiality or integrity.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 10 Product | all versions | No fix yet |
| Red Hat Enterprise Linux 6 Product | all versions | No fix yet |
| Red Hat Enterprise Linux 7 Product | all versions | No fix yet |
| Red Hat Enterprise Linux 8 Product | all versions | No fix yet |
| Red Hat Enterprise Linux 9 Product | all versions | No fix yet |
| Red Hat OpenShift Container Platform 4 Product | all versions | No fix yet |
| all versions | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-1322
More Red Hat advisories
All Red Hat| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Sep 11 | Red Hat Ceph Storage 4: buffer overflow | Medium6.1 | No fix yet |
| Sep 11 | Red Hat Dynamic Client Registration service of Keycloak: information disclosure | Medium4.9 | No fix yet |
| Sep 11 | A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost | Medium5.5 | No fix yet |
| Sep 11 | Red Hat, Inc.: CVE: user could modify a managed cluster’s ManagedClusterAddOn | High7.7 | No fix yet |
| Sep 11 | Red Hat GStreamer: integer overflow | Medium4.4 | No fix yet |
| Sep 10 | Red Hat admin backend of gvfs: race condition | High7.0 | 1.62.0+2 more |