CVE-2026-94582: Buffer Overflow
A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol component of Brocade Fabric OS versions before 10.0.1. While this code path is part of internal diagnostic functionality and is not directly accessible via standard user interfaces or CLI management commands, an input processing flaw allows incoming or internally routed diagnostic state payloads to exceed allocated memory boundaries. An attacker that is able to chain or link other vulnerabilities to exploit this internal diagnostic could cause a heap- or stack-based memory overrun, resulting in a daemon crash (Denial of Service) or potential arbitrary code execution within the context of the routing daemon.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Brocade Fabric OSto a version that resolves this vulnerability.Fixed in 10.0.1
Event History
Frequently Asked Questions
Which systems are affected?
Brocade Fabric OS versions before 10.0.1 are affected. The issue is in internal diagnostic and route-validation routines of the FSPF protocol component.
Can this be exploited directly through normal administrative access?
The vulnerable code path is not directly accessible through standard user interfaces or CLI management commands. Exploitation requires an attacker to chain or link other vulnerabilities to reach the internal diagnostic functionality.
What could successful exploitation cause?
A successful exploit can overrun heap or stack memory in the routing daemon. This could crash the daemon and cause denial of service, or potentially allow arbitrary code execution in the routing daemon's context.
How can I determine whether remediation is needed?
Check the installed Brocade Fabric OS version. Systems running a version earlier than 10.0.1 require remediation.