SB2026101337 - Multiple vulnerabilities in IBM Storage Scale
Published: October 13, 2026
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 3 vulnerabilities.
1) Out-of-bounds read (CVE-ID: CVE-2026-58216)
CWE-ID: CWE-125 - Out-of-bounds read
CVSSv4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote user to cause a denial of service.
The vulnerability exists due to an out-of-bounds read in the KDC kpasswd packet ASN.1 parsing when processing a malformed kpasswd packet. A remote user can send a specially crafted kpasswd packet to cause a denial of service.
The invalid access is limited to 6 bytes of unallocated memory, and the accessed memory is not exposed to the user.
2) Resource exhaustion (CVE-ID: CVE-2026-58218)
CWE-ID: CWE-400 - Resource exhaustion
CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to cause a denial of service.
The vulnerability exists due to improper resource management in the DNS TKEY name cache when repeatedly registering TKEY names. A remote attacker can repeatedly register names to cause a denial of service.
The issue can flood the cache and expunge legitimate TKEYs, practically blocking DNS TSIG signing.
3) SQL injection (CVE-ID: CVE-2026-58222)
CWE-ID: CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVSSv4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
The vulnerability allows a remote user to disclose sensitive information.
The vulnerability exists due to filter injection and trusted-request confusion in the LDAP Compare operation when handling LDAP Compare requests. A remote user can send crafted LDAP Compare requests to disclose sensitive information.
Confidential Active Directory attributes, including KDS root keys, can be queried by bypassing access checks.
Remediation
Install update from vendor's website.