CVE-2026-115485 Red Hat CVE debrief

Who should care

System administrators and security teams managing systems that use open-iscsi, especially those exposed to untrusted networks or with high security requirements, should review and address this vulnerability. This includes teams responsible for maintaining systems that rely on open-iscsi for iSCSI initiator functionality, as well as security teams that monitor for potential threats on the network.

Why it matters

CVE-2026-115485 is a medium-severity vulnerability in open-iscsi that can lead to daemon crashes, data corruption, or potential privilege escalation. It requires attention from system administrators and security teams, especially for systems exposed to untrusted networks.

• Potential daemon crashes or service disruptions
• Risk of iSCSI initiator name corruption or unauthorized changes
• Possible elevation of privileges or access to sensitive data
• Need for patching or updating open-iscsi configurations

Technical summary

The iscsiuio component of open-iscsi does not ensure a NUL terminator is present when calling strlen() on raw network data. This can cause it to read past the buffer into heap memory, potentially leading to a daemon crash, a 1-byte heap overwrite, or corruption of the iSCSI initiator name. The vulnerability can be triggered by sending a crafted DHCPv6 Advertise message, allowing an attacker on the same network segment to exploit this vulnerability. The affected component does not properly validate the length of DHCPv6 vendor options.

Defensive priority

Medium priority for systems using open-iscsi, especially those exposed to untrusted networks.

Recommended defensive actions

• Review and update open-iscsi configurations to limit exposure
• Implement network segmentation to restrict access to trusted networks
• Monitor for and apply patches from the open-iscsi project or Red Hat
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record and open-iscsi source provide details on the vulnerability. However, specific version information and remediation steps are not provided in the corpus. The vulnerability affects the iscsiuio component of open-iscsi and can be triggered by sending a crafted DHCPv6 Advertise message. Limited information is available on the exact scope of affected systems and versions.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.