Red Hat CVE-2026-35406

Aardvark-dns is a DNS service component for container networking that handles DNS queries from containers. The vulnerability resides in the TCP DNS query handling logic, where the code fails to properly handle the combination of a truncated DNS query packet and a subsequent connection reset. This triggers an unhandled exception or infinite retry loop rather than graceful error recovery. The root cause is classified as CWE-400 (Uncontrolled Resource Consumption), indicating the code lacks proper bounds checking or loop termination logic when processing malformed network packets. The affected product is delivered via the Rust netavark package (pkg:rust/netavark), which provides networking abstractions for container runtimes including Podman.