CVE-2026-79830
Description
A flaw was found in HPE NonStop Kernel Level Thread Model. A local authenticated user can trigger a stack-based buffer overflow vulnerability, which can result in arbitrary code execution. Successful exploitation may allow an attacker to execute unauthorized code on the affected system or cause a Denial of Service (DoS).
Statement
This vulnerability is rated as Moderate because exploitation requires local authenticated access, limiting the overall blast radius despite the potential for arbitrary code execution. The affected HPE NonStop Kernel Level Thread Model library is proprietary software exclusive to HPE NonStop environments and is neither packaged nor distributed in Red Hat products. Consequently, Red Hat enterprise offerings are not affected by this flaw.
Understanding the Weakness (CWE)
Integrity,Confidentiality,Availability
Technical Impact: Modify Memory; Execute Unauthorized Code or Commands
Buffer overflows often can be used to execute arbitrary code, which is usually outside the scope of the product's implicit security policy. This can often be used to subvert any other security service.
Availability
Technical Impact: Modify Memory; DoS: Crash, Exit, or Restart; DoS: Resource Consumption (CPU)
Buffer overflows generally lead to crashes. Other attacks leading to lack of availability are possible, including putting the product into an infinite loop.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
