RHSA-2026:98457: Moderate: tftp security update

Q: Which installed components are relevant to this issue?

The advisory covers the tftp client and tftp-server packages, along with their debuginfo and debugsource packages. The vulnerable functionality is described as the tftp-hpa remap engine.

Q: What is the impact of successful exploitation?

Successful exploitation can cause a denial of service through an out-of-bounds read or write in the remap engine.

Q: Which systems are most likely exposed?

Systems using TFTP services are the relevant population, particularly environments that use TFTP to boot diskless workstations. The provided information does not state whether the issue is reachable in a default configuration.

Published Nov 11, 2026

Updated

The Trivial File Transfer Protocol (TFTP) is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server subpackages. The tftp subpackage provides the user interface for TFTP and the tftp-server subpackage provides the server. This allows users to transfer files to and from a remote machine.Security Fix(es): tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine (CVE-2026-85234) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

20 affected componentsFixes available

redhat/tftp<5.2-41.el9_9

5.2-41.el9_9

redhat/tftp<5.2-41.el9_9

5.2-41.el9_9

redhat/tftp-debuginfo<5.2-41.el9_9

5.2-41.el9_9

redhat/tftp-debugsource<5.2-41.el9_9

5.2-41.el9_9

redhat/tftp-server<5.2-41.el9_9

5.2-41.el9_9

redhat/tftp-server-debuginfo<5.2-41.el9_9

5.2-41.el9_9

redhat/tftp-debuginfo<5.2-41.el9_9

5.2-41.el9_9

redhat/tftp-debugsource<5.2-41.el9_9

5.2-41.el9_9

redhat/tftp-server<5.2-41.el9_9

5.2-41.el9_9

redhat/tftp-server-debuginfo<5.2-41.el9_9

5.2-41.el9_9

redhat/tftp<5.2-41.el9_9

5.2-41.el9_9

redhat/tftp-debuginfo<5.2-41.el9_9

5.2-41.el9_9

redhat/tftp-debugsource<5.2-41.el9_9

5.2-41.el9_9

redhat/tftp-server<5.2-41.el9_9

5.2-41.el9_9

redhat/tftp-server-debuginfo<5.2-41.el9_9

5.2-41.el9_9

redhat/tftp<5.2-41.el9_9.aa

5.2-41.el9_9.aa

redhat/tftp-debuginfo<5.2-41.el9_9.aa

5.2-41.el9_9.aa

redhat/tftp-debugsource<5.2-41.el9_9.aa

5.2-41.el9_9.aa

redhat/tftp-server<5.2-41.el9_9.aa

5.2-41.el9_9.aa

redhat/tftp-server-debuginfo<5.2-41.el9_9.aa

5.2-41.el9_9.aa

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade redhat/tftp to a version that resolves this vulnerability.
Fixed in 5.2-41.el9_9
Upgrade
Upgrade redhat/tftp-debuginfo to a version that resolves this vulnerability.
Fixed in 5.2-41.el9_9
Upgrade
Upgrade redhat/tftp-debugsource to a version that resolves this vulnerability.
Fixed in 5.2-41.el9_9
Upgrade
Upgrade redhat/tftp-server to a version that resolves this vulnerability.
Fixed in 5.2-41.el9_9
Upgrade
Upgrade redhat/tftp-server-debuginfo to a version that resolves this vulnerability.
Fixed in 5.2-41.el9_9
Upgrade
Upgrade redhat/tftp to a version that resolves this vulnerability.
Fixed in 5.2-41.el9_9.aa
Upgrade
Upgrade redhat/tftp-debuginfo to a version that resolves this vulnerability.
Fixed in 5.2-41.el9_9.aa
Upgrade
Upgrade redhat/tftp-debugsource to a version that resolves this vulnerability.
Fixed in 5.2-41.el9_9.aa
Upgrade
Upgrade redhat/tftp-server to a version that resolves this vulnerability.
Fixed in 5.2-41.el9_9.aa
Upgrade
Upgrade redhat/tftp-server-debuginfo to a version that resolves this vulnerability.
Fixed in 5.2-41.el9_9.aa

Event History

Nov 11, 2026

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

Which installed components are relevant to this issue?

The advisory covers the tftp client and tftp-server packages, along with their debuginfo and debugsource packages. The vulnerable functionality is described as the tftp-hpa remap engine.

What is the impact of successful exploitation?

Successful exploitation can cause a denial of service through an out-of-bounds read or write in the remap engine.

Which systems are most likely exposed?

Systems using TFTP services are the relevant population, particularly environments that use TFTP to boot diskless workstations. The provided information does not state whether the issue is reachable in a default configuration.

RHSA-2026:98457: Moderate: tftp security update

Affected Software

Remediation

Event History

Frequently Asked Questions

Which installed components are relevant to this issue?

What is the impact of successful exploitation?

Which systems are most likely exposed?

Company

Resources

Contact

Frequently Asked Questions

Which installed components are relevant to this issue?

What is the impact of successful exploitation?

Which systems are most likely exposed?