- What: Denial of Service vulnerability in FRRouting
- Impact: Red Hat Enterprise Linux 8 users affected
Red Hat Product Errata RHSA-2026:49511 - Security Advisory Issued: 2026-08-03 Updated: 2026-08-03 RHSA-2026:49511 - Security Advisory Overview Updated Packages Synopsis Important: frr security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for frr is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. Security Fix(es): frr: FRRouting: Denial of Service via crafted BGP UPDATE message (CVE-2026-37460) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2484385 - CVE-2026-37460 frr: FRRouting: Denial of Service via crafted BGP UPDATE message CVEs CVE-2026-37460 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM frr-7.5.1-25.el8_10.src.rpm SHA-256: 181bc9dee59199940eb5d326923c2c3b27b45eb5583b2f27dae0fb31acf7e528 x86_64 frr-7.5.1-25.el8_10.x86_64.rpm SHA-256: 9456948dadd4d9b4baf870bcde63390261be72c3ab242069ba9de5107f242969 frr-debuginfo-7.5.1-25.el8_10.x86_64.rpm SHA-256: 255800f53d9315270a6c2a17ba5e1d074c7751c909c0917d4314f00493b7519d frr-debugsource-7.5.1-25.el8_10.x86_64.rpm SHA-256: c288859840d22da5c32882a08c98aaf96f25e2ce4af2308a789d0cd7f01d1023 frr-selinux-7.5.1-25.el8_10.noarch.rpm SHA-256: ebb9cab6a901c25ab1c23a64e44695f0a1c00859b6543adedadaa806433030e4 Red Hat Enterprise Linux for IBM z Systems 8 SRPM frr-7.5.1-25.el8_10.src.rpm SHA-256: 181bc9dee59199940eb5d326923c2c3b27b45eb5583b2f27dae0fb31acf7e528 s390x frr-7.5.1-25.el8_10.s390x.rpm SHA-256: 71c8728eb08ac70410a50a21126eb41d6eefae11b717ad542cedbf77d81e104f frr-debuginfo-7.5.1-25.el8_10.s390x.rpm SHA-256: 8b1bc65bbf66a147ed924942f1a08b2d4be4548e44fa956e70b6d39590216e59 frr-debugsource-7.5.1-25.el8_10.s390x.rpm SHA-256: c86faec56f64afde03b83c1a60c669920417e5d3ff2195e08561fed3a77321ba frr-selinux-7.5.1-25.el8_10.noarch.rpm SHA-256: ebb9cab6a901c25ab1c23a64e44695f0a1c00859b6543adedadaa806433030e4 Red Hat Enterprise Linux for Power, little endian 8 SRPM frr-7.5.1-25.el8_10.src.rpm SHA-256: 181bc9dee59199940eb5d326923c2c3b27b45eb5583b2f27dae0fb31acf7e528 ppc64le frr-7.5.1-25.el8_10.ppc64le.rpm SHA-256: 2ef9b900802ec1b73d857f9daac6c0966bacde44a90c7883d6406fa55e43d121 frr-debuginfo-7.5.1-25.el8_10.ppc64le.rpm SHA-256: 97f6f80e9cb958355181d3829736d40b5f79ac54c671663943e8cc2b54839b7c frr-debugsource-7.5.1-25.el8_10.ppc64le.rpm SHA-256: 0f09db0c36a99218e7995958b7a38f5263d1b41165d174ed63e2c8d3818144c2 frr-selinux-7.5.1-25.el8_10.noarch.rpm SHA-256: ebb9cab6a901c25ab1c23a64e44695f0a1c00859b6543adedadaa806433030e4 Red Hat Enterprise Linux for ARM 64 8 SRPM frr-7.5.1-25.el8_10.src.rpm SHA-256: 181bc9dee59199940eb5d326923c2c3b27b45eb5583b2f27dae0fb31acf7e528 aarch64 frr-7.5.1-25.el8_10.aarch64.rpm SHA-256: f4051f4344473c6fef5519a3e15b5f205ffa2ec403d45d9ecd0765b510f65694 frr-debuginfo-7.5.1-25.el8_10.aarch64.rpm SHA-256: d27b72050b6054610ee41685b8d5443a37420217b60f7d636a8a9b294052424e frr-debugsource-7.5.1-25.el8_10.aarch64.rpm SHA-256: 95c3a66d3eb69e5124fbe2adefc4af7977bfecc42c1eb1bf3c7a82353c478857 frr-selinux-7.5.1-25.el8_10.noarch.rpm SHA-256: ebb9cab6a901c25ab1c23a64e44695f0a1c00859b6543adedadaa806433030e4 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 SRPM frr-7.5.1-25.el8_10.src.rpm SHA-256: 181bc9dee59199940eb5d326923c2c3b27b45eb5583b2f27dae0fb31acf7e528 x86_64 frr-7.5.1-25.el8_10.x86_64.rpm SHA-256: 9456948dadd4d9b4baf870bcde63390261be72c3ab242069ba9de5107f242969 frr-debuginfo-7.5.1-25.el8_10.x86_64.rpm SHA-256: 255800f53d9315270a6c2a17ba5e1d074c7751c909c0917d4314f00493b7519d frr-debugsource-7.5.1-25.el8_10.x86_64.rpm SHA-256: c288859840d22da5c32882a08c98aaf96f25e2ce4af2308a789d0cd7f01d1023 frr-selinux-7.5.1-25.el8_10.noarch.rpm SHA-256: ebb9cab6a901c25ab1c23a64e44695f0a1c00859b6543adedadaa806433030e4 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 SRPM frr-7.5.1-25.el8_10.src.rpm SHA-256: 181bc9dee59199940eb5d326923c2c3b27b45eb5583b2f27dae0fb31acf7e528 aarch64 frr-7.5.1-25.el8_10.aarch64.rpm SHA-256: f4051f4344473c6fef5519a3e15b5f205ffa2ec403d45d9ecd0765b510f65694 frr-debuginfo-7.5.1-25.el8_10.aarch64.rpm SHA-256: d27b72050b6054610ee41685b8d5443a37420217b60f7d636a8a9b294052424e frr-debugsource-7.5.1-25.el8_10.aarch64.rpm SHA-256: 95c3a66d3eb69e5124fbe2adefc4af7977bfecc42c1eb1bf3c7a82353c478857 frr-selinux-7.5.1-25.el8_10.noarch.rpm SHA-256: ebb9cab6a901c25ab1c23a64e44695f0a1c00859b6543adedadaa806433030e4 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 SRPM frr-7.5.1-25.el8_10.src.rpm SHA-256: 181bc9dee59199940eb5d326923c2c3b27b45eb5583b2f27dae0fb31acf7e528 ppc64le frr-7.5.1-25.el8_10.ppc64le.rpm SHA-256: 2ef9b900802ec1b73d857f9daac6c0966bacde44a90c7883d6406fa55e43d121 frr-debuginfo-7.5.1-25.el8_10.ppc64le.rpm SHA-256: 97f6f80e9cb958355181d3829736d40b5f79ac54c671663943e8cc2b54839b7c frr-debugsource-7.5.1-25.el8_10.ppc64le.rpm SHA-256: 0f09db0c36a99218e7995958b7a38f5263d1b41165d174ed63e2c8d3818144c2 frr-selinux-7.5.1-25.el8_10.noarch.rpm SHA-256: ebb9cab6a901c25ab1c23a64e44695f0a1c00859b6543adedadaa806433030e4 Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 SRPM frr-7.5.1-25.el8_10.src.rpm SHA-256: 181bc9dee59199940eb5d326923c2c3b27b45eb5583b2f27dae0fb31acf7e528 s390x frr-7.5.1-25.el8_10.s390x.rpm SHA-256: 71c8728eb08ac70410a50a21126eb41d6eefae11b717ad542cedbf77d81e104f frr-debuginfo-7.5.1-25.el8_10.s390x.rpm SHA-256: 8b1bc65bbf66a147ed924942f1a08b2d4be4548e44fa956e70b6d39590216e59 frr-debugsource-7.5.1-25.el8_10.s390x.rpm SHA-256: c86faec56f64afde03b83c1a60c669920417e5d3ff2195e08561fed3a77321ba frr-selinux-7.5.1-25.el8_10.noarch.rpm SHA-256: ebb9cab6a901c25ab1c23a64e44695f0a1c00859b6543adedadaa806433030e4 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .