CVE-2026-95388

Меры по смягчению последствий

To mitigate this flaw, restrict access to the sharkd daemon or remove the package if it is not required:

1. Terminate running sharkd processes if daemonized packet analysis is not required: killall sharkd
2. If sharkd must be run over a network socket, bind it only to localhost or restrict incoming network traffic to trusted hosts using firewall rules: firewall-cmd --remove-port=/tcp --permanent firewall-cmd --reload Warning: Reloading firewall rules may temporarily disrupt active network connections.
3. If Wireshark command-line utilities are not necessary, remove the package providing the tool: dnf remove wireshark-cli Caveat: Removing wireshark-cli will remove related packet capture and dissection tools such as tshark.