Red Hat Product Errata RHSA-2026:24371 - Security Advisory
Issued:
2026-06-08
Updated:
2026-06-08

RHSA-2026:24371 - Security Advisory

Synopsis

Important: frr security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for frr is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD.

Security Fix(es):

  • frr: denial of service via crafted FlowSpec component (CVE-2026-37457)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 9 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x

Fixes

  • BZ - 2464548 - CVE-2026-37457 frr: denial of service via crafted FlowSpec component

Red Hat Enterprise Linux for x86_64 9

SRPM
frr-8.5.3-13.el9_8.src.rpm SHA-256: 1b3df40c066158fc8d72f07607a8bcfca579101e0d05208fa138a44d21ddcfd7
x86_64
frr-8.5.3-13.el9_8.x86_64.rpm SHA-256: 3e731808c26892c15b39ceb2a45f16cae43ad35b64820cd6fa254650abab6d7a
frr-debuginfo-8.5.3-13.el9_8.x86_64.rpm SHA-256: b5f094e9d08e1a94504919726d39747eea30e36975ac4edd77a0d69e37493f8f
frr-debugsource-8.5.3-13.el9_8.x86_64.rpm SHA-256: 671a811ea8c3ce35f01b29400067e722a0c2ece903ded394a7a8e8a409a87d62
frr-selinux-8.5.3-13.el9_8.noarch.rpm SHA-256: dbe17c6be95e32dca7a00a2d617056dc14d6cdce4218dafa806f443371403550

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8

SRPM
frr-8.5.3-13.el9_8.src.rpm SHA-256: 1b3df40c066158fc8d72f07607a8bcfca579101e0d05208fa138a44d21ddcfd7
x86_64
frr-8.5.3-13.el9_8.x86_64.rpm SHA-256: 3e731808c26892c15b39ceb2a45f16cae43ad35b64820cd6fa254650abab6d7a
frr-debuginfo-8.5.3-13.el9_8.x86_64.rpm SHA-256: b5f094e9d08e1a94504919726d39747eea30e36975ac4edd77a0d69e37493f8f
frr-debugsource-8.5.3-13.el9_8.x86_64.rpm SHA-256: 671a811ea8c3ce35f01b29400067e722a0c2ece903ded394a7a8e8a409a87d62
frr-selinux-8.5.3-13.el9_8.noarch.rpm SHA-256: dbe17c6be95e32dca7a00a2d617056dc14d6cdce4218dafa806f443371403550

Red Hat Enterprise Linux for IBM z Systems 9

SRPM
frr-8.5.3-13.el9_8.src.rpm SHA-256: 1b3df40c066158fc8d72f07607a8bcfca579101e0d05208fa138a44d21ddcfd7
s390x
frr-8.5.3-13.el9_8.s390x.rpm SHA-256: a96996cbe60a00dc51f064d555c7b93bf070e0eb74301f2e97e2ff3602a9fa19
frr-debuginfo-8.5.3-13.el9_8.s390x.rpm SHA-256: 6a54354f03825cb2eca504502e15e33a30453be5a4b125ba467f1cfe10a1fbd1
frr-debugsource-8.5.3-13.el9_8.s390x.rpm SHA-256: 0cbc23ca23c84f7af749aa1b06d93e9e01fb7b796492be0057a3815a701a20ad
frr-selinux-8.5.3-13.el9_8.noarch.rpm SHA-256: dbe17c6be95e32dca7a00a2d617056dc14d6cdce4218dafa806f443371403550

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8

SRPM
frr-8.5.3-13.el9_8.src.rpm SHA-256: 1b3df40c066158fc8d72f07607a8bcfca579101e0d05208fa138a44d21ddcfd7
s390x
frr-8.5.3-13.el9_8.s390x.rpm SHA-256: a96996cbe60a00dc51f064d555c7b93bf070e0eb74301f2e97e2ff3602a9fa19
frr-debuginfo-8.5.3-13.el9_8.s390x.rpm SHA-256: 6a54354f03825cb2eca504502e15e33a30453be5a4b125ba467f1cfe10a1fbd1
frr-debugsource-8.5.3-13.el9_8.s390x.rpm SHA-256: 0cbc23ca23c84f7af749aa1b06d93e9e01fb7b796492be0057a3815a701a20ad
frr-selinux-8.5.3-13.el9_8.noarch.rpm SHA-256: dbe17c6be95e32dca7a00a2d617056dc14d6cdce4218dafa806f443371403550

Red Hat Enterprise Linux for Power, little endian 9

SRPM
frr-8.5.3-13.el9_8.src.rpm SHA-256: 1b3df40c066158fc8d72f07607a8bcfca579101e0d05208fa138a44d21ddcfd7
ppc64le
frr-8.5.3-13.el9_8.ppc64le.rpm SHA-256: 18a0aceb2a3f59965a43873083c20b905ce3ba6d9e1e346a2d97b9de0a9b0038
frr-debuginfo-8.5.3-13.el9_8.ppc64le.rpm SHA-256: e03d2b0a44d970c344c773db79f5920e2e86409af6c2b5176d905781b09f77f2
frr-debugsource-8.5.3-13.el9_8.ppc64le.rpm SHA-256: 64828ddf4954c4f3457ad43d235b893ab44653c5cee8dd7e853a4256177511cf
frr-selinux-8.5.3-13.el9_8.noarch.rpm SHA-256: dbe17c6be95e32dca7a00a2d617056dc14d6cdce4218dafa806f443371403550

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8

SRPM
frr-8.5.3-13.el9_8.src.rpm SHA-256: 1b3df40c066158fc8d72f07607a8bcfca579101e0d05208fa138a44d21ddcfd7
ppc64le
frr-8.5.3-13.el9_8.ppc64le.rpm SHA-256: 18a0aceb2a3f59965a43873083c20b905ce3ba6d9e1e346a2d97b9de0a9b0038
frr-debuginfo-8.5.3-13.el9_8.ppc64le.rpm SHA-256: e03d2b0a44d970c344c773db79f5920e2e86409af6c2b5176d905781b09f77f2
frr-debugsource-8.5.3-13.el9_8.ppc64le.rpm SHA-256: 64828ddf4954c4f3457ad43d235b893ab44653c5cee8dd7e853a4256177511cf
frr-selinux-8.5.3-13.el9_8.noarch.rpm SHA-256: dbe17c6be95e32dca7a00a2d617056dc14d6cdce4218dafa806f443371403550

Red Hat Enterprise Linux for ARM 64 9

SRPM
frr-8.5.3-13.el9_8.src.rpm SHA-256: 1b3df40c066158fc8d72f07607a8bcfca579101e0d05208fa138a44d21ddcfd7
aarch64
frr-8.5.3-13.el9_8.aarch64.rpm SHA-256: 41975ad8b1443cf2e09e356f73d230c36cb6cd6a10ec78b73a33073a2b894e7b
frr-debuginfo-8.5.3-13.el9_8.aarch64.rpm SHA-256: 28b401da3c50fc658d0c8385a853554c6ee919fc0ac7d03c3323382870e1b669
frr-debugsource-8.5.3-13.el9_8.aarch64.rpm SHA-256: 7f0e7fc1988165459ea4525a8512fa25162f129c84c2a8949b12beb0b3165f50
frr-selinux-8.5.3-13.el9_8.noarch.rpm SHA-256: dbe17c6be95e32dca7a00a2d617056dc14d6cdce4218dafa806f443371403550

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8

SRPM
frr-8.5.3-13.el9_8.src.rpm SHA-256: 1b3df40c066158fc8d72f07607a8bcfca579101e0d05208fa138a44d21ddcfd7
aarch64
frr-8.5.3-13.el9_8.aarch64.rpm SHA-256: 41975ad8b1443cf2e09e356f73d230c36cb6cd6a10ec78b73a33073a2b894e7b
frr-debuginfo-8.5.3-13.el9_8.aarch64.rpm SHA-256: 28b401da3c50fc658d0c8385a853554c6ee919fc0ac7d03c3323382870e1b669
frr-debugsource-8.5.3-13.el9_8.aarch64.rpm SHA-256: 7f0e7fc1988165459ea4525a8512fa25162f129c84c2a8949b12beb0b3165f50
frr-selinux-8.5.3-13.el9_8.noarch.rpm SHA-256: dbe17c6be95e32dca7a00a2d617056dc14d6cdce4218dafa806f443371403550

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8

SRPM
frr-8.5.3-13.el9_8.src.rpm SHA-256: 1b3df40c066158fc8d72f07607a8bcfca579101e0d05208fa138a44d21ddcfd7
ppc64le
frr-8.5.3-13.el9_8.ppc64le.rpm SHA-256: 18a0aceb2a3f59965a43873083c20b905ce3ba6d9e1e346a2d97b9de0a9b0038
frr-debuginfo-8.5.3-13.el9_8.ppc64le.rpm SHA-256: e03d2b0a44d970c344c773db79f5920e2e86409af6c2b5176d905781b09f77f2
frr-debugsource-8.5.3-13.el9_8.ppc64le.rpm SHA-256: 64828ddf4954c4f3457ad43d235b893ab44653c5cee8dd7e853a4256177511cf
frr-selinux-8.5.3-13.el9_8.noarch.rpm SHA-256: dbe17c6be95e32dca7a00a2d617056dc14d6cdce4218dafa806f443371403550

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8

SRPM
frr-8.5.3-13.el9_8.src.rpm SHA-256: 1b3df40c066158fc8d72f07607a8bcfca579101e0d05208fa138a44d21ddcfd7
x86_64
frr-8.5.3-13.el9_8.x86_64.rpm SHA-256: 3e731808c26892c15b39ceb2a45f16cae43ad35b64820cd6fa254650abab6d7a
frr-debuginfo-8.5.3-13.el9_8.x86_64.rpm SHA-256: b5f094e9d08e1a94504919726d39747eea30e36975ac4edd77a0d69e37493f8f
frr-debugsource-8.5.3-13.el9_8.x86_64.rpm SHA-256: 671a811ea8c3ce35f01b29400067e722a0c2ece903ded394a7a8e8a409a87d62
frr-selinux-8.5.3-13.el9_8.noarch.rpm SHA-256: dbe17c6be95e32dca7a00a2d617056dc14d6cdce4218dafa806f443371403550

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8

SRPM
frr-8.5.3-13.el9_8.src.rpm SHA-256: 1b3df40c066158fc8d72f07607a8bcfca579101e0d05208fa138a44d21ddcfd7
aarch64
frr-8.5.3-13.el9_8.aarch64.rpm SHA-256: 41975ad8b1443cf2e09e356f73d230c36cb6cd6a10ec78b73a33073a2b894e7b
frr-debuginfo-8.5.3-13.el9_8.aarch64.rpm SHA-256: 28b401da3c50fc658d0c8385a853554c6ee919fc0ac7d03c3323382870e1b669
frr-debugsource-8.5.3-13.el9_8.aarch64.rpm SHA-256: 7f0e7fc1988165459ea4525a8512fa25162f129c84c2a8949b12beb0b3165f50
frr-selinux-8.5.3-13.el9_8.noarch.rpm SHA-256: dbe17c6be95e32dca7a00a2d617056dc14d6cdce4218dafa806f443371403550

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8

SRPM
frr-8.5.3-13.el9_8.src.rpm SHA-256: 1b3df40c066158fc8d72f07607a8bcfca579101e0d05208fa138a44d21ddcfd7
s390x
frr-8.5.3-13.el9_8.s390x.rpm SHA-256: a96996cbe60a00dc51f064d555c7b93bf070e0eb74301f2e97e2ff3602a9fa19
frr-debuginfo-8.5.3-13.el9_8.s390x.rpm SHA-256: 6a54354f03825cb2eca504502e15e33a30453be5a4b125ba467f1cfe10a1fbd1
frr-debugsource-8.5.3-13.el9_8.s390x.rpm SHA-256: 0cbc23ca23c84f7af749aa1b06d93e9e01fb7b796492be0057a3815a701a20ad
frr-selinux-8.5.3-13.el9_8.noarch.rpm SHA-256: dbe17c6be95e32dca7a00a2d617056dc14d6cdce4218dafa806f443371403550

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8

SRPM
frr-8.5.3-13.el9_8.src.rpm SHA-256: 1b3df40c066158fc8d72f07607a8bcfca579101e0d05208fa138a44d21ddcfd7
x86_64
frr-8.5.3-13.el9_8.x86_64.rpm SHA-256: 3e731808c26892c15b39ceb2a45f16cae43ad35b64820cd6fa254650abab6d7a
frr-debuginfo-8.5.3-13.el9_8.x86_64.rpm SHA-256: b5f094e9d08e1a94504919726d39747eea30e36975ac4edd77a0d69e37493f8f
frr-debugsource-8.5.3-13.el9_8.x86_64.rpm SHA-256: 671a811ea8c3ce35f01b29400067e722a0c2ece903ded394a7a8e8a409a87d62
frr-selinux-8.5.3-13.el9_8.noarch.rpm SHA-256: dbe17c6be95e32dca7a00a2d617056dc14d6cdce4218dafa806f443371403550

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8

SRPM
frr-8.5.3-13.el9_8.src.rpm SHA-256: 1b3df40c066158fc8d72f07607a8bcfca579101e0d05208fa138a44d21ddcfd7
aarch64
frr-8.5.3-13.el9_8.aarch64.rpm SHA-256: 41975ad8b1443cf2e09e356f73d230c36cb6cd6a10ec78b73a33073a2b894e7b
frr-debuginfo-8.5.3-13.el9_8.aarch64.rpm SHA-256: 28b401da3c50fc658d0c8385a853554c6ee919fc0ac7d03c3323382870e1b669
frr-debugsource-8.5.3-13.el9_8.aarch64.rpm SHA-256: 7f0e7fc1988165459ea4525a8512fa25162f129c84c2a8949b12beb0b3165f50
frr-selinux-8.5.3-13.el9_8.noarch.rpm SHA-256: dbe17c6be95e32dca7a00a2d617056dc14d6cdce4218dafa806f443371403550

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8

SRPM
frr-8.5.3-13.el9_8.src.rpm SHA-256: 1b3df40c066158fc8d72f07607a8bcfca579101e0d05208fa138a44d21ddcfd7
ppc64le
frr-8.5.3-13.el9_8.ppc64le.rpm SHA-256: 18a0aceb2a3f59965a43873083c20b905ce3ba6d9e1e346a2d97b9de0a9b0038
frr-debuginfo-8.5.3-13.el9_8.ppc64le.rpm SHA-256: e03d2b0a44d970c344c773db79f5920e2e86409af6c2b5176d905781b09f77f2
frr-debugsource-8.5.3-13.el9_8.ppc64le.rpm SHA-256: 64828ddf4954c4f3457ad43d235b893ab44653c5cee8dd7e853a4256177511cf
frr-selinux-8.5.3-13.el9_8.noarch.rpm SHA-256: dbe17c6be95e32dca7a00a2d617056dc14d6cdce4218dafa806f443371403550

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8

SRPM
frr-8.5.3-13.el9_8.src.rpm SHA-256: 1b3df40c066158fc8d72f07607a8bcfca579101e0d05208fa138a44d21ddcfd7
s390x
frr-8.5.3-13.el9_8.s390x.rpm SHA-256: a96996cbe60a00dc51f064d555c7b93bf070e0eb74301f2e97e2ff3602a9fa19
frr-debuginfo-8.5.3-13.el9_8.s390x.rpm SHA-256: 6a54354f03825cb2eca504502e15e33a30453be5a4b125ba467f1cfe10a1fbd1
frr-debugsource-8.5.3-13.el9_8.s390x.rpm SHA-256: 0cbc23ca23c84f7af749aa1b06d93e9e01fb7b796492be0057a3815a701a20ad
frr-selinux-8.5.3-13.el9_8.noarch.rpm SHA-256: dbe17c6be95e32dca7a00a2d617056dc14d6cdce4218dafa806f443371403550

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.