CVE-2026-92694
Description
A flaw was found in FastNetMon. A remote attacker could trigger a race condition—a timing conflict where multiple operations access shared data simultaneously—resulting in a Denial of Service (DoS). When processing network traffic within monitored IPv6 ranges, the application updates internal traffic statistics at the same time as screen updates occur without adequate synchronization locking. Under heavy traffic conditions, this unsynchronized access can cause data corruption and potentially crash the monitoring service.
Statement
This vulnerability is evaluated as having a Moderate impact because triggering the race condition requires specific administrative configuration to monitor IPv6 network segments alongside heavy concurrent traffic, and exploitation leads to undefined state rather than confirmed service crashes or elevated privileges. Additionally, the flaw is confined to the interactive terminal visualizer rather than core traffic interception routines. FastNetMon is not distributed or supported as part of Red Hat Enterprise Linux, minimizing direct exposure for Red Hat environments.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Understanding the Weakness (CWE)
Integrity,Other
Technical Impact: Alter Execution Logic; Unexpected State
The main problem is that -- if a lock is overcome -- data could be altered in a bad state.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
