CVE-2026-56117 Details
Description
dhcpcd through 10.3.2, fixed in commit 78ea09e, contains a heap use-after-free vulnerability in the control socket handling within src/control.c that allows local unprivileged attackers to trigger memory corruption when privilege separation is disabled. Attackers can connect to the control socket and send a privileged command such as -x, causing control_recvdata() to free the client object while the same READ+HANGUP event subsequently reaches control_hangup() with the stale pointer, resulting in a use-after-free condition exploitable in deployments using --disable-privsep or where privsep initialization has failed with the control socket operating in mode 0666.
A heap use-after-free vulnerability has been identified in dhcpcd versions through 10.3.2, within the control socket handling in src/control.c. This vulnerability allows local unprivileged attackers to cause memory corruption when privilege separation is disabled. Exploitation involves connecting to the control socket and sending a privileged command, such as -x. This action triggers the control_recvdata() function to free the client object while a READ+HANGUP event is simultaneously processed by control_hangup() with the now-stale pointer, creating a use-after-free condition. The vulnerability is exploitable in deployments that have disabled privilege separation or where the privilege separation initialization has failed, leaving the control socket in mode 0666.
Users can upgrade to dhcpcd version 10.3.3 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jun 24, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-416 | Use After Free | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| dhcpcd project dhcpcd | <= 10.3.2 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 14, 2026 | CVE Modified | [email protected] |
| Jun 28, 2026 | Initial Analysis | [email protected] |
| Jun 24, 2026 | CVE Modified | CISA-ADP |
| Jun 23, 2026 | New CVE Received | [email protected] |