CVE-2026-44919

In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop in checksum calculations can occur via the file:///dev/zero URL.

Scoring

Severity

MEDIUM

CVSS base score

4.3

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

EPSS probability

0.47%

CWE

CWE-696

Published

2026-05-14

Last modified

2026-05-21

Affected products

• OpenStack Ironic
• OpenStack Ironic
• OpenStack Ironic
• OpenStack Ironic

Weakness type

• CWE-696

Related vulnerabilities

• CVE-2026-68930 — Russh: Channel-scoped server callbacks can be reached without an open channel
• CVE-2026-44108 — Firewall bypass during shutdown
• CVE-2026-67217 — cJSON JSON Patch Non-Atomic Application Destroys Data Before Validation
• CVE-2026-65100 — Apache Traffic Server: HPACK encoder desynchronizes from the decoder after a failed header encode
• CVE-2026-14169 — ads-tec Industrial IT: Account lockout via non-atomic user creation
• CVE-2026-56355 — GNU Savannah Administration Savane through 3.17 uses untrusted data as part of authorization.
• CVE-2026-49318 — Indian Scout Bobber 2025 Infotainment Digital Round skips PIN entry when WCM is silent at boot
• CVE-2026-49317 — Indian Scout Bobber 2025 Infotainment Digital Round skips PIN entry when WCM is silent at boot

Markdown version · Browse all CVEs