cve 2026 16461

CVE-2026-16461 is a denial-of-service vulnerability in the Linux rpcinfo utility shipped with rpcbind. It affects Windows administrators primarily where Linux workloads run through Windows Subsystem for Linux (WSL), containers, virtual machines, or mixed Windows/Linux infrastructure. The flaw is not a Windows kernel or networking-stack issue; it involves client-side processing when rpcinfo -s queries a malicious or compromised remote rpcbind service. Microsoft published the CVE in its Security Update Guide, and the public record identifies the affected component. This tag covers discussions about the vulnerability's impact, mitigation, and relevance to Windows environments running Linux components.