OESA-2026-4716

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-4716

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2026-4716.json

JSON Data

https://api.osv.dev/v1/vulns/OESA-2026-4716

Upstream

CVE-2026-114038

Published

2026-11-04T13:54:50Z

Modified

2026-11-04T14:00:06Z

Severity

5.1 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L CVSS Calculator

Summary

multipath-tools security update

Details

This package provides the multipath tool and the multipathd daemon to manage dm-multipath devices. multipath can detect and set up multipath maps. multipathd sets up multipath maps automatically, monitors path devices for failure, removal, or addition, and applies the necessary changes to the multipath maps to ensure continuous availability of the map devices.

Security Fix(es):

A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the multipath daemon. This issue can allow the user to expose unintended daemon memory, leading to information disclosure, or cause the daemon to crash, resulting in a Denial of Service (DoS).(CVE-2026-114038)

Database specific

{
    "severity": "Medium"
}

References

Affected packages

openEuler:24.03-LTS-SP1 / multipath-tools

Package

Name: multipath-tools
Purl: pkg:rpm/openEuler/multipath-tools&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.9.5-22.oe2403sp1

Ecosystem specific

{
    "aarch64": [
        "kpartx-0.9.5-22.oe2403sp1.aarch64.rpm",
        "multipath-tools-0.9.5-22.oe2403sp1.aarch64.rpm",
        "multipath-tools-debuginfo-0.9.5-22.oe2403sp1.aarch64.rpm",
        "multipath-tools-debugsource-0.9.5-22.oe2403sp1.aarch64.rpm",
        "multipath-tools-devel-0.9.5-22.oe2403sp1.aarch64.rpm"
    ],
    "noarch": [
        "multipath-tools-help-0.9.5-22.oe2403sp1.noarch.rpm"
    ],
    "src": [
        "multipath-tools-0.9.5-22.oe2403sp1.src.rpm"
    ],
    "x86_64": [
        "kpartx-0.9.5-22.oe2403sp1.x86_64.rpm",
        "multipath-tools-0.9.5-22.oe2403sp1.x86_64.rpm",
        "multipath-tools-debuginfo-0.9.5-22.oe2403sp1.x86_64.rpm",
        "multipath-tools-debugsource-0.9.5-22.oe2403sp1.x86_64.rpm",
        "multipath-tools-devel-0.9.5-22.oe2403sp1.x86_64.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2026-4716.json"