CVE-2026-13002

Description

A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service. An attacker who controls any DNSSEC-signed zone can hang the dnsmasq process with a single crafted response, killing all DNS resolution for its clients.

CVSS Vector

References

• https://access.redhat.com/security/cve/CVE-2026-13002
• https://bugzilla.redhat.com/show_bug.cgi?id=2486360