Two denial-of-service vulnerabilities (CVE-2026-37457 and CVE-2026-37459, both CVSS 7.5 High) affect FRRouting, triggered by a crafted FlowSpec component and a crafted BGP UPDATE message respectively. The vulnerabilities affect FRRouting version 10.0, as per authoritative NVD data. Red Hat has released an important security update for the frr10 package to address these issues in Red Hat Enterprise Linux 9.
Red Hat Product Errata RHSA-2026:24370 - Security Advisory Issued: 2026-06-08 Updated: 2026-06-08 RHSA-2026:24370 - Security Advisory Overview Updated Packages Synopsis Important: frr10 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for frr10 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description FRRouting is free software that manages TCP/IP based routing protocols. It takes a multi-server and multi-threaded approach to resolve the current complexity of the Internet. FRRouting supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. FRRouting is a fork of Quagga. Security Fix(es): frr: denial of service via crafted FlowSpec component (CVE-2026-37457) frr: denial of service via crafted BGP UPDATE message (CVE-2026-37459) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2464548 - CVE-2026-37457 frr: denial of service via crafted FlowSpec component BZ - 2466513 - CVE-2026-37459 frr: denial of service via crafted BGP UPDATE message CVEs CVE-2026-37457 CVE-2026-37459 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM frr10-10.4.3-3.el9_8.src.rpm SHA-256: 6a359f752037e3eb60cef2b7b1c17d25b90657a8e9ad5f8b5a282a52c31ee218 x86_64 frr10-10.4.3-3.el9_8.x86_64.rpm SHA-256: 3a165e4a70fdcf87ecd69d60ad29632d1328e88bb5fc01a5d15646d727df380f frr10-debuginfo-10.4.3-3.el9_8.x86_64.rpm SHA-256: e1d5e540d824509e61e023147bd9015a22ea4073b4fe3b8aa875336cd19790a8 frr10-debugsource-10.4.3-3.el9_8.x86_64.rpm SHA-256: 03b95f8701a3eab7cbf06da3a0c9ff2076a3051524c81fe65c0b3b76553758e9 frr10-selinux-10.4.3-3.el9_8.noarch.rpm SHA-256: d319183f190c8547f011fdfae8ab9266e27006a45dcc554eeae3c64b9f54866d Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM frr10-10.4.3-3.el9_8.src.rpm SHA-256: 6a359f752037e3eb60cef2b7b1c17d25b90657a8e9ad5f8b5a282a52c31ee218 x86_64 frr10-10.4.3-3.el9_8.x86_64.rpm SHA-256: 3a165e4a70fdcf87ecd69d60ad29632d1328e88bb5fc01a5d15646d727df380f frr10-debuginfo-10.4.3-3.el9_8.x86_64.rpm SHA-256: e1d5e540d824509e61e023147bd9015a22ea4073b4fe3b8aa875336cd19790a8 frr10-debugsource-10.4.3-3.el9_8.x86_64.rpm SHA-256: 03b95f8701a3eab7cbf06da3a0c9ff2076a3051524c81fe65c0b3b76553758e9 frr10-selinux-10.4.3-3.el9_8.noarch.rpm SHA-256: d319183f190c8547f011fdfae8ab9266e27006a45dcc554eeae3c64b9f54866d Red Hat Enterprise Linux for IBM z Systems 9 SRPM frr10-10.4.3-3.el9_8.src.rpm SHA-256: 6a359f752037e3eb60cef2b7b1c17d25b90657a8e9ad5f8b5a282a52c31ee218 s390x frr10-10.4.3-3.el9_8.s390x.rpm SHA-256: 67389bf440a346abf5a17b60638935080d6634f480a690c15e28d9c077ef6fdd frr10-debuginfo-10.4.3-3.el9_8.s390x.rpm SHA-256: 8971c4e860362e9ddba40beabc81e48c02060aad175cbbc9a15055144ea7af11 frr10-debugsource-10.4.3-3.el9_8.s390x.rpm SHA-256: c1192daacaa72186e74b4f14f8de38b41eebdba44c2caa59abb4bb2c5850d28b frr10-selinux-10.4.3-3.el9_8.noarch.rpm SHA-256: d319183f190c8547f011fdfae8ab9266e27006a45dcc554eeae3c64b9f54866d Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM frr10-10.4.3-3.el9_8.src.rpm SHA-256: 6a359f752037e3eb60cef2b7b1c17d25b90657a8e9ad5f8b5a282a52c31ee218 s390x frr10-10.4.3-3.el9_8.s390x.rpm SHA-256: 67389bf440a346abf5a17b60638935080d6634f480a690c15e28d9c077ef6fdd frr10-debuginfo-10.4.3-3.el9_8.s390x.rpm SHA-256: 8971c4e860362e9ddba40beabc81e48c02060aad175cbbc9a15055144ea7af11 frr10-debugsource-10.4.3-3.el9_8.s390x.rpm SHA-256: c1192daacaa72186e74b4f14f8de38b41eebdba44c2caa59abb4bb2c5850d28b frr10-selinux-10.4.3-3.el9_8.noarch.rpm SHA-256: d319183f190c8547f011fdfae8ab9266e27006a45dcc554eeae3c64b9f54866d Red Hat Enterprise Linux for Power, little endian 9 SRPM frr10-10.4.3-3.el9_8.src.rpm SHA-256: 6a359f752037e3eb60cef2b7b1c17d25b90657a8e9ad5f8b5a282a52c31ee218 ppc64le frr10-10.4.3-3.el9_8.ppc64le.rpm SHA-256: d5627161d12491300f3106197becbc2d46c82baff0038ed1ade4e5f365f74e0f frr10-debuginfo-10.4.3-3.el9_8.ppc64le.rpm SHA-256: c13061a18fcba8ad26450c3de98398930bf954875e2082db09ea93a4dcfc1462 frr10-debugsource-10.4.3-3.el9_8.ppc64le.rpm SHA-256: f42de4f728aa3a83cf2aa7b8fb48fbb037837f54991a72ee84f96cd213c509e3 frr10-selinux-10.4.3-3.el9_8.noarch.rpm SHA-256: d319183f190c8547f011fdfae8ab9266e27006a45dcc554eeae3c64b9f54866d Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 SRPM frr10-10.4.3-3.el9_8.src.rpm SHA-256: 6a359f752037e3eb60cef2b7b1c17d25b90657a8e9ad5f8b5a282a52c31ee218 ppc64le frr10-10.4.3-3.el9_8.ppc64le.rpm SHA-256: d5627161d12491300f3106197becbc2d46c82baff0038ed1ade4e5f365f74e0f frr10-debuginfo-10.4.3-3.el9_8.ppc64le.rpm SHA-256: c13061a18fcba8ad26450c3de98398930bf954875e2082db09ea93a4dcfc1462 frr10-debugsource-10.4.3-3.el9_8.ppc64le.rpm SHA-256: f42de4f728aa3a83cf2aa7b8fb48fbb037837f54991a72ee84f96cd213c509e3 frr10-selinux-10.4.3-3.el9_8.noarch.rpm SHA-256: d319183f190c8547f011fdfae8ab9266e27006a45dcc554eeae3c64b9f54866d Red Hat Enterprise Linux for ARM 64 9 SRPM frr10-10.4.3-3.el9_8.src.rpm SHA-256: 6a359f752037e3eb60cef2b7b1c17d25b90657a8e9ad5f8b5a282a52c31ee218 aarch64 frr10-10.4.3-3.el9_8.aarch64.rpm SHA-256: a801923608b411f65f9bb411812cf0190776318238c54f77c35e363a28224beb frr10-debuginfo-10.4.3-3.el9_8.aarch64.rpm SHA-256: 44786355c90947dcb9f9da72d838a20ec67ccd2e7e9be3070b2a7ac900e240fe frr10-debugsource-10.4.3-3.el9_8.aarch64.rpm SHA-256: 51c0b19a785bbf91e0aec9e2fe16899cc91e191ca37ec38b9e01e4bf885d0173 frr10-selinux-10.4.3-3.el9_8.noarch.rpm SHA-256: d319183f190c8547f011fdfae8ab9266e27006a45dcc554eeae3c64b9f54866d Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 SRPM frr10-10.4.3-3.el9_8.src.rpm SHA-256: 6a359f752037e3eb60cef2b7b1c17d25b90657a8e9ad5f8b5a282a52c31ee218 aarch64 frr10-10.4.3-3.el9_8.aarch64.rpm SHA-256: a801923608b411f65f9bb411812cf0190776318238c54f77c35e363a28224beb frr10-debuginfo-10.4.3-3.el9_8.aarch64.rpm SHA-256: 44786355c90947dcb9f9da72d838a20ec67ccd2e7e9be3070b2a7ac900e240fe frr10-debugsource-10.4.3-3.el9_8.aarch64.rpm SHA-256: 51c0b19a785bbf91e0aec9e2fe16899cc91e191ca37ec38b9e01e4bf885d0173 frr10-selinux-10.4.3-3.el9_8.noarch.rpm SHA-256: d319183f190c8547f011fdfae8ab9266e27006a45dcc554eeae3c64b9f54866d Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 SRPM frr10-10.4.3-3.el9_8.src.rpm SHA-256: 6a359f752037e3eb60cef2b7b1c17d25b90657a8e9ad5f8b5a282a52c31ee218 ppc64le frr10-10.4.3-3.el9_8.ppc64le.rpm SHA-256: d5627161d12491300f3106197becbc2d46c82baff0038ed1ade4e5f365f74e0f frr10-debuginfo-10.4.3-3.el9_8.ppc64le.rpm SHA-256: c13061a18fcba8ad26450c3de98398930bf954875e2082db09ea93a4dcfc1462 frr10-debugsource-10.4.3-3.el9_8.ppc64le.rpm SHA-256: f42de4f728aa3a83cf2aa7b8fb48fbb037837f54991a72ee84f96cd213c509e3 frr10-selinux-10.4.3-3.el9_8.noarch.rpm SHA-256: d319183f190c8547f011fdfae8ab9266e27006a45dcc554eeae3c64b9f54866d Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 SRPM frr10-10.4.3-3.el9_8.src.rpm SHA-256: 6a359f752037e3eb60cef2b7b1c17d25b90657a8e9ad5f8b5a282a52c31ee218 x86_64 frr10-10.4.3-3.el9_8.x86_64.rpm SHA-256: 3a165e4a70fdcf87ecd69d60ad29632d1328e88bb5fc01a5d15646d727df380f frr10-debuginfo-10.4.3-3.el9_8.x86_64.rpm SHA-256: e1d5e540d824509e61e023147bd9015a22ea4073b4fe3b8aa875336cd19790a8 frr10-debugsource-10.4.3-3.el9_8.x86_64.rpm SHA-256: 03b95f8701a3eab7cbf06da3a0c9ff2076a3051524c81fe65c0b3b76553758e9 frr10-selinux-10.4.3-3.el9_8.noarch.rpm SHA-256: d319183f190c8547f011fdfae8ab9266e27006a45dcc554eeae3c64b9f54866d Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 SRPM frr10-10.4.3-3.el9_8.src.rpm SHA-256: 6a359f752037e3eb60cef2b7b1c17d25b90657a8e9ad5f8b5a282a52c31ee218 aarch64 frr10-10.4.3-3.el9_8.aarch64.rpm SHA-256: a801923608b411f65f9bb411812cf0190776318238c54f77c35e363a28224beb frr10-debuginfo-10.4.3-3.el9_8.aarch64.rpm SHA-256: 44786355c90947dcb9f9da72d838a20ec67ccd2e7e9be3070b2a7ac900e240fe frr10-debugsource-10.4.3-3.el9_8.aarch64.rpm SHA-256: 51c0b19a785bbf91e0aec9e2fe16899cc91e191ca37ec38b9e01e4bf885d0173 frr10-selinux-10.4.3-3.el9_8.noarch.rpm SHA-256: d319183f190c8547f011fdfae8ab9266e27006a45dcc554eeae