Critical Security Update for fence-agents: Denial of Service Vulnerability
Summary
ALSA-2026:1903: Important: fence-agents security update. Affects fence-agents-aliyun versions < 4.10.0-98.el9_7.5. Fixed in 4.10.0-98.el9_7.5. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The fence-agents package is a collection of scripts designed for managing remote power operations for cluster devices. It plays a crucial role in ensuring that failed or unreachable nodes can be forcibly restarted and removed from the cluster, thus maintaining system integrity and uptime. This package is essential for environments that rely on high availability and clustering technologies.
Vulnerability Detail
The vulnerability identified as CVE-2026-23490 is a Denial of Service (DoS) issue caused by memory exhaustion resulting from the processing of malformed RELATIVE-OID inputs. This can lead to significant disruptions in service, as the affected system may become unresponsive or crash due to resource depletion. The vulnerability stems from the pyasn1 library, which is utilized within the fence-agents package, highlighting the importance of maintaining up-to-date dependencies.
How To Fix
Minimum fixed version
4.10.0-98.el9_7.5
This is the first release that contains the fix.
sudo dnf update fence-agents-aliyunTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, if updating is not immediately feasible, consider disabling the affected components of the fence-agents package until the patch can be applied. This can help mitigate the risk of exploitation while maintaining some level of operational capability.
Conclusion
The fence-agents package has a critical vulnerability that can lead to Denial of Service due to memory exhaustion. It is essential to update to the patched version to mitigate risks. Users should also consider using tools like Vulert to monitor for vulnerabilities in their applications.
See every vulnerability recorded for fence-agents-aliyun →
FAQ
The vulnerability is a Denial of Service (DoS) issue that can cause memory exhaustion due to malformed inputs.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Check your application against the vulnerability using the Vulert playground at Vulert Scanner.
Exploitation of this vulnerability can lead to service disruptions, causing the affected system to become unresponsive or crash.
Yes, a patch is available in version 4.10.0-98.el9_7.5 of the fence-agents package.
If immediate updating is not possible, consider disabling the affected components of the fence-agents package as a temporary workaround.
Related vulnerabilities
Recent vulnerabilities recorded for fence-agents-aliyun.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
