PT-2026-51332 · Red Hat · Red Hat Enterprise Linux 10+5

Yiwei Hou · Published 2026-06-22 · Updated 2026-06-22 · CVE-2026-12725

Mitre

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of DS or DNSKEY replies containing unsupported algorithm or digest types can cause dnsmasq to write past the end of an internal logging buffer. A remote attacker able to supply such a DNS response may crash the dnsmasq process, resulting in denial of service.

Fix

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

CVE-2026-12725

Affected Products

Red Hat Enterprise Linux 10

Red Hat Enterprise Linux 6

Red Hat Enterprise Linux 7

Red Hat Enterprise Linux 8

Red Hat Enterprise Linux 9

Red Hat Openshift Container Platform 4

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-12725 · Security Note
• https://access.redhat.com/security/cve/CVE-2026-12725 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2490763 · Note