RLSA-2026:98563: Moderate: tftp security update
The Trivial File Transfer Protocol (TFTP) is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server subpackages. The tftp subpackage provides the user interface for TFTP and the tftp-server subpackage provides the server. This allows users to transfer files to and from a remote machine.
Security Fix(es):
tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine (CVE-2026-85234)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
rocky-linux/tftp-debuginfoto a version that resolves this vulnerability.Fixed in 0:5.2-51.el10_3 - Upgrade
Upgrade
rocky-linux/tftp-server-debuginfoto a version that resolves this vulnerability.Fixed in 0:5.2-51.el10_3 - Upgrade
Upgrade
rocky-linux/tftpto a version that resolves this vulnerability.Fixed in 0:5.2-51.el10_3 - Upgrade
Upgrade
rocky-linux/tftp-debugsourceto a version that resolves this vulnerability.Fixed in 0:5.2-51.el10_3 - Upgrade
Upgrade
rocky-linux/tftp-serverto a version that resolves this vulnerability.Fixed in 0:5.2-51.el10_3
Event History
Frequently Asked Questions
Which systems are exposed to the denial-of-service risk?
Systems running the TFTP server are the relevant exposure point, because the tftp-server subpackage provides the server component. The issue is remotely reachable with no privileges or user interaction required, according to the supplied CVSS vector.
What could an attacker do?
An attacker can exploit an out-of-bounds read/write condition in the tftp-hpa remap engine to cause a denial of service. The provided impact information indicates availability impact only; no confidentiality or integrity impact is listed.
Which Rocky Linux packages are included in this update?
The advisory lists tftp, tftp-server, tftp-debuginfo, tftp-server-debuginfo, and tftp-debugsource. The server package is the operationally relevant package for systems accepting TFTP requests.