Bug 2526606

Summary:	CVE-2026-10822 dhcp: Key Record using PRIVATEDNS algorithm may lead to exit [fedora-all]
Product:	[Fedora] Fedora	Reporter:	Jon Weiser <jweiser>
Component:	dhcp	Assignee:	Martin Osvald 🛹 <mosvald>
Status:	CLOSED NOTABUG	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	rawhide	CC:	fhrdina, jorton, mosvald, pavel, pemensik
Target Milestone:	---	Keywords:	Security, SecurityTracking
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:	{"flaws": ["14c635d5-ac32-4737-9471-6fe9e02179a8"]}
Fixed In Version:		Doc Type:	---
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2026-09-14 10:32:01 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	2504598

Description Jon Weiser 2026-09-01 00:33:43 UTC

Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.

A KEY/DNSKEY record with PRIVATEDNS algorithm (253) and an
  overlong algorithm identifier can be stored, then crashes named
  when rendered to text. Requires UI:R (user interaction) — someone
  must first store the malformed record.

Comment 1 Martin Osvald 🛹 2026-09-14 10:32:01 UTC

ISC DHCP is not affected by CVE-2026-10822. This is a BIND server-side issue specific to named's handling of KEY/DNSKEY records using the PRIVATEDNS algorithm (253); ISC DHCP does not store or render DNS key records in this manner.

Additionally, the affected BIND versions start at 9.18.0, while ISC DHCP bundles bind-export-libs 9.11.36, which is below the affected range.

ISC DHCP uses portions of the ISC BIND libraries (primarily libdns, omapi, and libisccfg) only to support DDNS (TSIG support, DNS message construction/parsing, DHCID generation), OMAPI-related operations, and basic functions (configuration handling, data structures, logging, networking primitives), not for DNS zone data handling or record-to-text rendering.