CVE-2026-89329 — Device-mapper-multipath: local denial of service via blocking ipc send operations
A flaw was found in `multipathd`. A local attacker with access to the `multipathd` UNIX control socket can exploit this vulnerability by sending valid commands and then ceasing …
Published: 2026-09-11 · CVSS: 6.2 · CVSS 3.1
A flaw was found in `multipathd`. A local attacker with access to the `multipathd` UNIX control socket can exploit this vulnerability by sending valid commands and then ceasing to read replies. This action can cause the `multipathd` listener thread to block, leading to a Denial of Service (DoS) where legitimate Inter-Process Communication (IPC) operations may hang or time out. This issue does not result in privilege escalation, arbitrary code execution, or impact data confidentiality or integrity.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7