{"affected":[{"defaultStatus":"unaffected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"busybox","product":"Red Hat Enterprise Linux 6","source":"CNA: redhat","vendor":"Red Hat","versions":[]},{"defaultStatus":"affected","ecosystem":"https://access.redhat.com/downloads/content/package-browser/","packageName":"busybox","product":"Red Hat Hardened Images","source":"CNA: redhat","vendor":"Red Hat","versions":[]}],"cveId":"CVE-2026-124740","cwes":["CWE-416"],"description":"A flaw was found in BusyBox's udhcpc6 DHCPv6 client. A malicious server on the local network can trigger a use-after-free condition by responding with a crafted Dynamic Host Configuration Protocol for IPv6 (DHCPv6) reply packet lacking usable address options. This issue causes the client to read stale heap memory, which can result in a Denial of Service (DoS) due to an application crash or disclose previously assigned network address data in subsequent discovery requests.","epss":{"date":"2026-11-12","percentile":0.10349,"score":0.00203},"exploits":[],"kev":null,"metrics":[{"score":4.3,"severity":"medium","source":"CNA: redhat","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},{"score":4.3,"severity":"medium","source":"NVD: secalert@redhat.com","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"}],"modifiedAt":1794512046974,"publishedAt":1794395991920,"references":[{"source":"CNA: redhat","tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2026-124740"},{"source":"CNA: redhat","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2571616"},{"source":"secalert@redhat.com","tags":[],"url":"https://access.redhat.com/security/cve/CVE-2026-124740"},{"source":"secalert@redhat.com","tags":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2571616"}],"remediation":[{"kind":"workaround","source":"CNA: redhat","text":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"revision":"0be9307f15a9a95ac222570194560bfe9d68744d79b42f449bed8381076b9ba9","sources":[{"modifiedAt":1794512046974,"name":"CNA: redhat","retrievedAt":1794514189189,"url":"https://www.cve.org/CVERecord?id=CVE-2026-124740"},{"modifiedAt":1794399587830,"name":"NVD","retrievedAt":1794421025236,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-124740"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1794514202762,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-124740"}],"ssvc":{"assessedAt":1794512027214,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Busybox: use-after-free of requested_ipv6 in udhcpc6","updatedAt":1794514202762}