Wind River Support Network

HomeDefectsLIN1021-25613

Acknowledged

LIN1021-25613 : Security Advisory - dnsmasq - CVE-2026-5172

Created: May 12, 2026 Updated: May 19, 2026

Found In Version: 10.21.20.2

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

A buffer overflow in dnsmasq’s extract_addresses() function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response, enabling extract_name() to advance the pointer past the record’s end.