PT-2026-51566 · Networkconfiguration · Dhcpcd

Cub3Y0Nd + 1 · Published 2026-06-23 · Updated 2026-06-23 · CVE-2026-56117

NVD

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

dhcpcd through 10.3.2, fixed in commit 78ea09e, contains a heap use-after-free vulnerability in the control socket handling within src/control.c that allows local unprivileged attackers to trigger memory corruption when privilege separation is disabled. Attackers can connect to the control socket and send a privileged command such as -x, causing control recvdata() to free the client object while the same READ+HANGUP event subsequently reaches control hangup() with the stale pointer, resulting in a use-after-free condition exploitable in deployments using --disable-privsep or where privsep initialization has failed with the control socket operating in mode 0666.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-56117

Affected Products

Dhcpcd

References · 3

• https://github.com/NetworkConfiguration/dhcpcd/commit/78ea09ed1633a583dbcde6e7bab9df4639ec8a34 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-56117 · Security Note
• https://vulncheck.com/advisories/dhcpcd-heap-use-after-free-via-control-socket-handling · Note