{"id":"CVE-2026-91759","kind":"vulnerability","aliases":["CVE-2026-91759"],"related":[],"title":"Hitachi Dynamic Link Manager for Linux: out-of-bounds write flaw","description":"Out-of-Bounds Write Vulnerability in Hitachi Dynamic Link Manager for Linux.\n\n\nThis issue affects Hitachi Dynamic Link Manager for Linux: from 7.5.0-00 before 9.0.5-00.","summary":"Hitachi Dynamic Link Manager for Linux, from 7.5.0-00 before 9.0.5-00, has an out-of-bounds write flaw. The sources do not say what an attacker can do beyond that, or what the trigger is.","severity":"high","cvss":7.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["dynamic-link-manager","hitachi","infrastructure","linux","multipath"],"not_affected_if":["unknown"],"how_to_check":"- Check the installed Dynamic Link Manager for Linux version against the affected range (7.5.0-00 up to, but not including, 9.0.5-00).\n- Confirm the vendor advisory for the exact product build and any required setup: unknown.","fix":"- Move to Dynamic Link Manager for Linux `9.0.5-00` or later.","status":"open","published_at":"2026-11-10T05:18:15+00:00","first_seen_at":"2026-11-10T05:19:58+00:00","triaged_at":"2026-11-10T05:22:16+00:00","updated_at":"2026-11-10T05:22:16+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-10T05:22:16Z","model":"claude-haiku-5-5","output":{"fix":"- Move to Dynamic Link Manager for Linux `9.0.5-00` or later.","reach":"unknown","title":"Hitachi Dynamic Link Manager for Linux: out-of-bounds write flaw","impact":"high","summary":"Hitachi Dynamic Link Manager for Linux, from 7.5.0-00 before 9.0.5-00, has an out-of-bounds write flaw. The sources do not say what an attacker can do beyond that, or what the trigger is.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["hitachi","dynamic-link-manager","linux","multipath"],"confidence":0.5,"fix_status":"available","needs_auth":"unknown","worst_case":"unknown; an out-of-bounds write can corrupt memory or run code","analyst_note":"Check the Hitachi vendor advisory for CVE-2026-91759 for trigger conditions, required privileges and the exact fixed build; the NVD entry gives only the affected range.","how_to_check":"- Check the installed Dynamic Link Manager for Linux version against the affected range (7.5.0-00 up to, but not including, 9.0.5-00).\n- Confirm the vendor advisory for the exact product build and any required setup: unknown.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Organizations running Hitachi Dynamic Link Manager for Linux in the affected range. The sources do not say what trigger or configuration makes it reachable, so whether a given server is exposed is unknown.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000746,"input_tokens":4536,"output_tokens":585,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-00':35B,38B,87C,90C '-2026':14A,17A '-91759':15A,18A '7.5.0':34B,86C '9.0.5':37B,89C 'affect':78C 'attack':54B 'beyond':57B 'bound':10A,44B,66C 'cve':13A,16A 'dynam':2A,20B,28B,71C,80C 'dynamic-link-manag':19B 'flaw':12A,46B 'hitachi':1A,23B,27B,70C,79C 'infrastructur':24B 'issu':77C 'link':3A,21B,29B,72C,81C 'linux':6A,25B,32B,75C,84C 'manag':4A,22B,30B,73C,82C 'multipath':26B 'out-of-bound':7A,41B,63C 'say':51B 'sourc':48B 'trigger':62B 'vulner':68C 'write':11A,45B,67C","nicknames":[],"mitigations":[],"who_affected":"Organizations running Hitachi Dynamic Link Manager for Linux in the affected range. The sources do not say what trigger or configuration makes it reachable, so whether a given server is exposed is unknown.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["dynamiclinkmanager","high","hitachi","infrastructure","linux","multipath"],"campaign_type":null,"search_a":"'-2026':14A,17A '-91759':15A,18A 'bound':10A 'cve':13A,16A 'dynam':2A 'flaw':12A 'hitachi':1A 'link':3A 'linux':6A 'manag':4A 'out-of-bound':7A 'write':11A","search_b":"'-00':35B,38B '7.5.0':34B '9.0.5':37B 'attack':54B 'beyond':57B 'bound':44B 'dynam':20B,28B 'dynamic-link-manag':19B 'flaw':46B 'hitachi':23B,27B 'infrastructur':24B 'link':21B,29B 'linux':25B,32B 'manag':22B,30B 'multipath':26B 'out-of-bound':41B 'say':51B 'sourc':48B 'trigger':62B 'write':45B","search_c":"'-00':87C,90C '7.5.0':86C '9.0.5':89C 'affect':78C 'bound':66C 'dynam':71C,80C 'hitachi':70C,79C 'issu':77C 'link':72C,81C 'linux':75C,84C 'manag':73C,82C 'out-of-bound':63C 'vulner':68C 'write':67C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T05:18:15+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"hirt@hitachi.co.jp","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-91759","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91759","severity":null,"published_at":"2026-11-10T05:18:15+00:00","modified_at":"2026-11-10T05:18:15+00:00","first_seen_at":"2026-11-10T05:19:58+00:00","fetched_at":"2026-11-10T05:19:58+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}