ALSA-2026:88207: Important: iperf3 security update
Iperf is a tool which can measure maximum TCP bandwidth and tune various parameters and UDP characteristics. Iperf reports bandwidth, delay jitter, and data-gram loss.
Security Fix(es):
iperf3: iperf3: Denial of Service via UDP receive worker infinite loop (CVE-2026-102253)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
almalinux/iperf3to a version that resolves this vulnerability.Fixed in 3.17.1-6.el10_2.2