medium4.3
CVE-2026-44919
In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop in checksum calculations can occur via the file:///dev/zero URL.
Impact
In OpenStack Ironic through 35.x before a3f6d73, during image handling, an infinite loop in checksum calculations can occur via the file:///dev/zero URL.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | ironic | <= 36.0.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openstack | Ironic | from 23.0.4 before 29.0.6 from 30.0.0 before 32.0.2 from 33.0.0 before 35.0.2 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/advisories/GHSA-4g73-w726-53h3
- https://nvd.nist.gov/vuln/detail/CVE-2026-44919
- https://bugs.launchpad.net/ironic/+bug/2150332
- https://opendev.org/openstack/ironic/commit/a3f6d735ac3642ab95b49142c7305f072ae748d0
- https://security.openstack.org/ossa/OSSA-2026-013.html