A denial-of-service vulnerability (CVE-2026-37457, CVSS 7.5 HIGH) exists in FRRouting due to improper handling of a crafted FlowSpec component. The NVD data indicates FRRouting version 10.0 is affected, though the specific fixed version is not provided in the available information. Red Hat has released an update marked Important for FRR packages on RHEL 9 to address this issue.
Red Hat Product Errata RHSA-2026:24371 - Security Advisory Issued: 2026-06-08 Updated: 2026-06-08 RHSA-2026:24371 - Security Advisory Overview Updated Packages Synopsis Important: frr security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for frr is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. Security Fix(es): frr: denial of service via crafted FlowSpec component (CVE-2026-37457) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2464548 - CVE-2026-37457 frr: denial of service via crafted FlowSpec component CVEs CVE-2026-37457 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM frr-8.5.3-13.el9_8.src.rpm SHA-256: 1b3df40c066158fc8d72f07607a8bcfca579101e0d05208fa138a44d21ddcfd7 x86_64 frr-8.5.3-13.el9_8.x86_64.rpm SHA-256: 3e731808c26892c15b39ceb2a45f16cae43ad35b64820cd6fa254650abab6d7a frr-debuginfo-8.5.3-13.el9_8.x86_64.rpm SHA-256: b5f094e9d08e1a94504919726d39747eea30e36975ac4edd77a0d69e37493f8f frr-debugsource-8.5.3-13.el9_8.x86_64.rpm SHA-256: 671a811ea8c3ce35f01b29400067e722a0c2ece903ded394a7a8e8a409a87d62 frr-selinux-8.5.3-13.el9_8.noarch.rpm SHA-256: dbe17c6be95e32dca7a00a2d617056dc14d6cdce4218dafa806f443371403550 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM frr-8.5.3-13.el9_8.src.rpm SHA-256: 1b3df40c066158fc8d72f07607a8bcfca579101e0d05208fa138a44d21ddcfd7 x86_64 frr-8.5.3-13.el9_8.x86_64.rpm SHA-256: 3e731808c26892c15b39ceb2a45f16cae43ad35b64820cd6fa254650abab6d7a frr-debuginfo-8.5.3-13.el9_8.x86_64.rpm SHA-256: b5f094e9d08e1a94504919726d39747eea30e36975ac4edd77a0d69e37493f8f frr-debugsource-8.5.3-13.el9_8.x86_64.rpm SHA-256: 671a811ea8c3ce35f01b29400067e722a0c2ece903ded394a7a8e8a409a87d62 frr-selinux-8.5.3-13.el9_8.noarch.rpm SHA-256: dbe17c6be95e32dca7a00a2d617056dc14d6cdce4218dafa806f443371403550 Red Hat Enterprise Linux for IBM z Systems 9 SRPM frr-8.5.3-13.el9_8.src.rpm SHA-256: 1b3df40c066158fc8d72f07607a8bcfca579101e0d05208fa138a44d21ddcfd7 s390x frr-8.5.3-13.el9_8.s390x.rpm SHA-256: a96996cbe60a00dc51f064d555c7b93bf070e0eb74301f2e97e2ff3602a9fa19 frr-debuginfo-8.5.3-13.el9_8.s390x.rpm SHA-256: 6a54354f03825cb2eca504502e15e33a30453be5a4b125ba467f1cfe10a1fbd1 frr-debugsource-8.5.3-13.el9_8.s390x.rpm SHA-256: 0cbc23ca23c84f7af749aa1b06d93e9e01fb7b796492be0057a3815a701a20ad frr-selinux-8.5.3-13.el9_8.noarch.rpm SHA-256: dbe17c6be95e32dca7a00a2d617056dc14d6cdce4218dafa806f443371403550 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM frr-8.5.3-13.el9_8.src.rpm SHA-256: 1b3df40c066158fc8d72f07607a8bcfca579101e0d05208fa138a44d21ddcfd7 s390x frr-8.5.3-13.el9_8.s390x.rpm SHA-256: a96996cbe60a00dc51f064d555c7b93bf070e0eb74301f2e97e2ff3602a9fa19 frr-debuginfo-8.5.3-13.el9_8.s390x.rpm SHA-256: 6a54354f03825cb2eca504502e15e33a30453be5a4b125ba467f1cfe10a1fbd1 frr-debugsource-8.5.3-13.el9_8.s390x.rpm SHA-256: 0cbc23ca23c84f7af749aa1b06d93e9e01fb7b796492be0057a3815a701a20ad frr-selinux-8.5.3-13.el9_8.noarch.rpm SHA-256: dbe17c6be95e32dca7a00a2d617056dc14d6cdce4218dafa806f443371403550 Red Hat Enterprise Linux for Power, little endian 9 SRPM frr-8.5.3-13.el9_8.src.rpm SHA-256: 1b3df40c066158fc8d72f07607a8bcfca579101e0d05208fa138a44d21ddcfd7 ppc64le frr-8.5.3-13.el9_8.ppc64le.rpm SHA-256: 18a0aceb2a3f59965a43873083c20b905ce3ba6d9e1e346a2d97b9de0a9b0038 frr-debuginfo-8.5.3-13.el9_8.ppc64le.rpm SHA-256: e03d2b0a44d970c344c773db79f5920e2e86409af6c2b5176d905781b09f77f2 frr-debugsource-8.5.3-13.el9_8.ppc64le.rpm SHA-256: 64828ddf4954c4f3457ad43d235b893ab44653c5cee8dd7e853a4256177511cf frr-selinux-8.5.3-13.el9_8.noarch.rpm SHA-256: dbe17c6be95e32dca7a00a2d617056dc14d6cdce4218dafa806f443371403550 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 SRPM frr-8.5.3-13.el9_8.src.rpm SHA-256: 1b3df40c066158fc8d72f07607a8bcfca579101e0d05208fa138a44d21ddcfd7 ppc64le frr-8.5.3-13.el9_8.ppc64le.rpm SHA-256: 18a0aceb2a3f59965a43873083c20b905ce3ba6d9e1e346a2d97b9de0a9b0038 frr-debuginfo-8.5.3-13.el9_8.ppc64le.rpm SHA-256: e03d2b0a44d970c344c773db79f5920e2e86409af6c2b5176d905781b09f77f2 frr-debugsource-8.5.3-13.el9_8.ppc64le.rpm SHA-256: 64828ddf4954c4f3457ad43d235b893ab44653c5cee8dd7e853a4256177511cf frr-selinux-8.5.3-13.el9_8.noarch.rpm SHA-256: dbe17c6be95e32dca7a00a2d617056dc14d6cdce4218dafa806f443371403550 Red Hat Enterprise Linux for ARM 64 9 SRPM frr-8.5.3-13.el9_8.src.rpm SHA-256: 1b3df40c066158fc8d72f07607a8bcfca579101e0d05208fa138a44d21ddcfd7 aarch64 frr-8.5.3-13.el9_8.aarch64.rpm SHA-256: 41975ad8b1443cf2e09e356f73d230c36cb6cd6a10ec78b73a33073a2b894e7b frr-debuginfo-8.5.3-13.el9_8.aarch64.rpm SHA-256: 28b401da3c50fc658d0c8385a853554c6ee919fc0ac7d03c3323382870e1b669 frr-debugsource-8.5.3-13.el9_8.aarch64.rpm SHA-256: 7f0e7fc1988165459ea4525a8512fa25162f129c84c2a8949b12beb0b3165f50 frr-selinux-8.5.3-13.el9_8.noarch.rpm SHA-256: dbe17c6be95e32dca7a00a2d617056dc14d6cdce4218dafa806f443371403550 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 SRPM frr-8.5.3-13.el9_8.src.rpm SHA-256: 1b3df40c066158fc8d72f07607a8bcfca579101e0d05208fa138a44d21ddcfd7 aarch64 frr-8.5.3-13.el9_8.aarch64.rpm SHA-256: 41975ad8b1443cf2e09e356f73d230c36cb6cd6a10ec78b73a33073a2b894e7b frr-debuginfo-8.5.3-13.el9_8.aarch64.rpm SHA-256: 28b401da3c50fc658d0c8385a853554c6ee919fc0ac7d03c3323382870e1b669 frr-debugsource-8.5.3-13.el9_8.aarch64.rpm SHA-256: 7f0e7fc1988165459ea4525a8512fa25162f129c84c2a8949b12beb0b3165f50 frr-selinux-8.5.3-13.el9_8.noarch.rpm SHA-256: dbe17c6be95e32dca7a00a2d617056dc14d6cdce4218dafa806f443371403550 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 SRPM frr-8.5.3-13.el9_8.src.rpm SHA-256: 1b3df40c066158fc8d72f07607a8bcfca579101e0d05208fa138a44d21ddcfd7 ppc64le frr-8.5.3-13.el9_8.ppc64le.rpm SHA-256: 18a0aceb2a3f59965a43873083c20b905ce3ba6d9e1e346a2d97b9de0a9b0038 frr-debuginfo-8.5.3-13.el9_8.ppc64le.rpm SHA-256: e03d2b0a44d970c344c773db79f5920e2e86409af6c2b5176d905781b09f77f2 frr-debugsource-8.5.3-13.el9_8.ppc64le.rpm SHA-256: 64828ddf4954c4f3457ad43d235b893ab44653c5cee8dd7e853a4256177511cf frr-selinux-8.5.3-13.el9_8.noarch.rpm SHA-256: dbe17c6be95e32dca7a00a2d617056dc14d6cdce4218dafa806f443371403550 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 SRPM frr-8.5.3-13.el9_8.src.rpm SHA-256: 1b3df40c066158fc8d72f07607a8bcfca579101e0d05208fa138a44d21ddcfd7 x86_64 frr-8.5.3-13.el9_8.x86_64.rpm SHA-256: 3e731808c26892c15b39ceb2a45f16cae43ad35b64820cd6fa254650abab6d7a frr-debuginfo-8.5.3-13.el9_8.x86_64.rpm SHA-256: b5f094e9d08e1a94504919726d39747eea30e36975ac4edd77a0d69e37493f8f frr-debugsource-8.5.3-13.el9_8.x86_64.rpm SHA-256: 671a811ea8c3ce35f01b29400067e722a0c2ece903ded394a7a8e8a409a87d62 frr-selinux-8.5.3-13.el9_8.noarch.rpm SHA-256: dbe17c6be95e32dca7a00a2d617056dc14d6cdce4218dafa806f443371403550 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 SRPM frr-8.5.3-13.el9_8.src.rpm SHA-256: 1b3df40c066158fc8d72f07607a8bcfca579101e0d05208fa138a44d21ddcfd7 aarch64 frr-8.5.3-13.el9_8.aarch64.rpm SHA-256: 41975ad8b1443cf2e09e356f73d230c36cb6cd6a10ec78b73a33073a2b894e7b frr-debuginfo-8.5.3-13.el9_8.aarch64.rpm SHA-256: 28b401da3c50fc658d0c8385a853554c6ee919fc0ac7d03c3323382870e1b669 frr-debugsource-8.5.3-13.el9_8.aarch64.rpm SHA-256: 7f0e7fc1988165459ea4525a8512fa25162f129c84c2a8949b12beb0b3165f50 frr-selinux-8.5.3-13.el9_8.noarch.rpm SHA-256: dbe17c6be95e32dca7a00a2d617056dc14d6cdce4218dafa806f443371403550 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 SRPM frr-8.5.3-13.el9_8.src.rpm SHA-256: 1b3df40c066158fc8d72f07607a8bcfca579101e0d05208fa138a44d21ddcfd7 s390x frr-8.5.3-13.el9_8.s390x.rpm SHA-256: a96996cbe60a00dc51f064d555c7b93bf070e0eb74301f2e97e2ff3602a9fa19 frr-debuginfo-8.5.3-13.el9_8.s390x.rpm SHA-256: 6a54354f03825cb2eca504502e15e33a30453be5a4b125ba467f1cfe10a1fbd1 frr-debugsource