Red Hat Enterprise Linux/Enterprise Linux for NVIDIA NodeGetFreePages RPC handler integer overflow

Summaryinfo

A vulnerability was found in Red Hat Enterprise Linux and Enterprise Linux for NVIDIA. It has been rated as very critical. Affected is an unknown function of the component NodeGetFreePages RPC handler. Performing a manipulation results in integer overflow. This vulnerability is known as CVE-2026-18917. Attacking locally is a requirement. No exploit is available.

Detailsinfo

A vulnerability, which was classified as very critical, was found in Red Hat Enterprise Linux and Enterprise Linux for NVIDIA (version unknown). This affects an unknown function of the component NodeGetFreePages RPC handler. The manipulation with an unknown input leads to a integer overflow vulnerability. CWE is classifying the issue as CWE-190. The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer. This heap buffer overflow can corrupt the root libvirt daemon's memory, potentially leading to a denial of service or local privilege escalation.

The advisory is shared at access.redhat.com. This vulnerability is uniquely identified as CVE-2026-18917 since 08/05/2026. The exploitability is told to be easy. An attack has to be approached locally. Neither technical details nor an exploit are publicly available. The price for an exploit might be around USD $5k-$25k at the moment (estimation calculated on 08/20/2026).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Operating System

Vendor

• Red Hat

Name

• Enterprise Linux
• Enterprise Linux for NVIDIA

License

• commercial

Website

• Vendor: https://www.redhat.com/

CPE 2.3info

• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion