Bug 2548341 (CVE-2026-94440) - CVE-2026-94440 net/textproto: mime/multipart: golang: golang: Denial of Service via memory limit bypass in multipart form parsing
Summary: CVE-2026-94440 net/textproto: mime/multipart: golang: golang: Denial of Servi...
Keywords:
Status: NEW
Alias: CVE-2026-94440
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-10-08 23:01 UTC by OSIDB Bzimport
Modified: 2026-11-04 07:48 UTC (History)
75 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2026:89732 0 None None None 2026-10-26 01:42:36 UTC
Red Hat Product Errata RHSA-2026:89884 0 None None None 2026-10-26 09:53:55 UTC
Red Hat Product Errata RHSA-2026:89885 0 None None None 2026-10-26 10:31:21 UTC
Red Hat Product Errata RHSA-2026:89888 0 None None None 2026-10-26 10:30:09 UTC
Red Hat Product Errata RHSA-2026:89933 0 None None None 2026-10-26 15:16:49 UTC
Red Hat Product Errata RHSA-2026:90332 0 None None None 2026-10-26 15:02:32 UTC
Red Hat Product Errata RHSA-2026:91138 0 None None None 2026-10-27 20:41:42 UTC
Red Hat Product Errata RHSA-2026:91572 0 None None None 2026-10-28 04:38:03 UTC
Red Hat Product Errata RHSA-2026:91587 0 None None None 2026-10-28 07:37:09 UTC
Red Hat Product Errata RHSA-2026:91646 0 None None None 2026-10-28 11:33:48 UTC
Red Hat Product Errata RHSA-2026:91958 0 None None None 2026-10-28 15:56:41 UTC
Red Hat Product Errata RHSA-2026:92372 0 None None None 2026-10-29 14:21:49 UTC
Red Hat Product Errata RHSA-2026:92858 0 None None None 2026-10-29 21:38:07 UTC
Red Hat Product Errata RHSA-2026:92859 0 None None None 2026-10-29 21:40:31 UTC
Red Hat Product Errata RHSA-2026:92860 0 None None None 2026-10-29 21:36:47 UTC
Red Hat Product Errata RHSA-2026:93596 0 None None None 2026-11-02 10:52:12 UTC
Red Hat Product Errata RHSA-2026:93617 0 None None None 2026-11-02 12:44:03 UTC
Red Hat Product Errata RHSA-2026:95014 0 None None None 2026-11-04 07:48:18 UTC
Red Hat Product Errata RHSA-2026:95015 0 None None None 2026-11-04 07:43:49 UTC
Red Hat Product Errata RHSA-2026:95016 0 None None None 2026-11-04 07:33:29 UTC

Description OSIDB Bzimport 2026-10-08 23:01:40 UTC 
Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes.
Comment 5 Jon Orris 2026-10-26 01:42:32 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:89732 https://access.redhat.com/errata/RHSA-2026:89732
Comment 6 Jon Orris 2026-10-26 09:53:51 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:89884 https://access.redhat.com/errata/RHSA-2026:89884
Comment 7 Jon Orris 2026-10-26 10:30:04 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:89888 https://access.redhat.com/errata/RHSA-2026:89888
Comment 8 Jon Orris 2026-10-26 10:31:15 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:89885 https://access.redhat.com/errata/RHSA-2026:89885
Comment 9 Jon Orris 2026-10-26 15:02:28 UTC 
This issue has been addressed in the following products:

  Red Hat OpenStack Services on OpenShift 18.0

Via RHSA-2026:90332 https://access.redhat.com/errata/RHSA-2026:90332
Comment 10 Jon Orris 2026-10-26 15:16:44 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:89933 https://access.redhat.com/errata/RHSA-2026:89933
Comment 11 Jon Orris 2026-10-27 20:41:37 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:91138 https://access.redhat.com/errata/RHSA-2026:91138
Comment 12 Jon Orris 2026-10-28 04:37:58 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:91572 https://access.redhat.com/errata/RHSA-2026:91572
Comment 13 Jon Orris 2026-10-28 07:37:05 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:91587 https://access.redhat.com/errata/RHSA-2026:91587
Comment 14 Jon Orris 2026-10-28 11:33:44 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:91646 https://access.redhat.com/errata/RHSA-2026:91646
Comment 15 Jon Orris 2026-10-28 15:56:37 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:91958 https://access.redhat.com/errata/RHSA-2026:91958
Comment 16 Jon Orris 2026-10-29 14:21:45 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:92372 https://access.redhat.com/errata/RHSA-2026:92372
Comment 17 Jon Orris 2026-10-29 21:36:42 UTC 
This issue has been addressed in the following products:

  Red Hat Satellite 6.18 for RHEL 9

Via RHSA-2026:92860 https://access.redhat.com/errata/RHSA-2026:92860
Comment 18 Jon Orris 2026-10-29 21:38:03 UTC 
This issue has been addressed in the following products:

  Red Hat Satellite 6.16 for RHEL 8
  Red Hat Satellite 6.16 for RHEL 9

Via RHSA-2026:92858 https://access.redhat.com/errata/RHSA-2026:92858
Comment 19 Jon Orris 2026-10-29 21:40:26 UTC 
This issue has been addressed in the following products:

  Red Hat Satellite 6.17 for RHEL 9

Via RHSA-2026:92859 https://access.redhat.com/errata/RHSA-2026:92859
Comment 20 Jon Orris 2026-11-02 10:52:07 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:93596 https://access.redhat.com/errata/RHSA-2026:93596
Comment 21 Jon Orris 2026-11-02 12:43:58 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:93617 https://access.redhat.com/errata/RHSA-2026:93617
Comment 23 Jon Orris 2026-11-04 07:33:25 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:95016 https://access.redhat.com/errata/RHSA-2026:95016
Comment 24 Jon Orris 2026-11-04 07:43:45 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:95015 https://access.redhat.com/errata/RHSA-2026:95015
Comment 25 Jon Orris 2026-11-04 07:48:13 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:95014 https://access.redhat.com/errata/RHSA-2026:95014
Note You need to log in before you can comment on or make changes to this bug.