CVE-2026-76890
wireshark: Wireshark: Denial of service in sharkd via expired pointer dereference
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 20, 2026
Updated · September 22, 2026
Description
A flaw was found in Wireshark's sharkd component. A remote attacker could exploit an expired pointer dereference, which leads to a crash in the sharkd service. This vulnerability could result in a denial of service (DoS) for affected systems, requiring user interaction to trigger the flaw.
Statement
This Low impact denial of service vulnerability in Wireshark's sharkd component requires high attack complexity and user interaction for successful exploitation. The limited exposure and specific conditions needed to trigger the flaw reduce its overall risk to Red Hat supported products.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
To mitigate this denial of service vulnerability, ensure the sharkd service is not running if its functionality is not required. If sharkd is necessary, restrict network access to trusted hosts using firewall rules to limit exposure. This may impact remote analysis capabilities if sharkd is actively used. A service restart or reload may be required for changes to take effect.
CVSS / CWE
CVSS 3.1 · 3.1CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
CWE-825 · Expired Pointer Dereference