CVE-2026-9150 Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums
Attackers can cause denial of service via stack-based buffer overflow in libsolv's Debian metadata parser using crafted checksums.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2026-9150?
CVE-2026-9150 is a medium-severity memory corruption vulnerability in Redhat Enterprise Linux, published on 20 May 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A flaw was found in libsolv. This stack-based buffer overflow vulnerability occurs in libsolv's Debian metadata parser when processing specially crafted Debian repository metadata. An attacker could exploit this by providing malicious SHA384 or SHA512 checksum tags, leading to memory corruption and a denial of service (DoS) in the affected system.
Weakness: CWE-121
Which versions are affected by CVE-2026-9150?
It affects 6 products.
Linux distribution packages (8)
libsolv Red Hat:hummingbird:1 | All versions | 0:0.7.39-3.hum1 |
libsolv-demo Red Hat:hummingbird:1 | All versions | 0:0.7.39-3.hum1 |
libsolv-devel Red Hat:hummingbird:1 | All versions | 0:0.7.39-3.hum1 |
libsolv-tools Red Hat:hummingbird:1 | All versions | 0:0.7.39-3.hum1 |
libsolv-tools-base Red Hat:hummingbird:1 | All versions | 0:0.7.39-3.hum1 |
perl-solv Red Hat:hummingbird:1 | All versions | 0:0.7.39-3.hum1 |
python3-solv Red Hat:hummingbird:1 | All versions | 0:0.7.39-3.hum1 |
ruby-solv Red Hat:hummingbird:1 | All versions | 0:0.7.39-3.hum1 |
Products include Opensuse Libsolv, Redhat Enterprise Linux, Redhat Hardened Images, Redhat Openshift Container Platform, Redhat Satellite, Redhat Update Infrastructure.
How do I fix CVE-2026-9150?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2026-9150 being exploited?
There is no known exploitation of CVE-2026-9150 in the wild and no public exploit code.
Other vulnerabilities in Redhat Enterprise Linux
Sources
Also known as AZL-88053, CLSA-2026-1783588055, CLSA-2026-1783937718, DEBIAN-CVE-2026-9150, GHSA-p4w9-3pj8-mhq7, RHSA-2026:30649 and 1 more.