OESA-2026-4715: multipath-tools security update
This package provides the multipath tool and the multipathd daemon to manage dm-multipath devices. multipath can detect and set up multipath maps. multipathd sets up multipath maps automatically, monitors path devices for failure, removal, or addition, and applies the necessary changes to the multipath maps to ensure continuous availability of the map devices. Security Fix(es):
A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the multipath daemon. This issue can allow the user to expose unintended daemon memory, leading to information disclosure, or cause the daemon to crash, resulting in a Denial of Service (DoS).(CVE-2026-114038)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
openeuler/multipath-toolsto a version that resolves this vulnerability.Fixed in 0.8.7-30.oe2203sp4
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems running the multipathd daemon are exposed because the flaw is triggered by a command sent to that daemon. Exploitation requires local access; no privileges or user interaction are required according to the supplied severity vector.
What can an attacker do?
A local attacker can send a command whose format string ends with a trailing percent character, triggering an out-of-bounds read. This may disclose unintended multipathd memory contents or crash the daemon, causing denial of service.
How can I determine whether an attempted exploit occurred?
The provided information identifies the triggering condition as a command with a format string ending in a trailing percent character. It does not provide specific log entries, detection methods, or indicators of compromise.