UBUNTU-CVE-2026-42577

🗓️ 13 May 2026 19:17:00Reported by GoogleType

osv🔗 osv.dev👁 1 Views

Netty epoll transport fails to close connections that receive a reset after half-closure, causing stale channels and a CPU busy loop; fixed in four point two point thirteen final.

Reporter	Title	Published	Views	Family All 71
IBM Security Bulletins	Security Bulletin: IBM SPSS Analytic Server is affected by multiple vulnerabilities in Netty	27 May 202605:11	–	ibm
Chainguard	CVE-2026-42577 vulnerabilities	8 May 202601:17	–	cgr
CNNVD	Netty 安全漏洞	13 May 202600:00	–	cnnvd
CVE	CVE-2026-42577	13 May 202618:00	–	cve
Cvelist	CVE-2026-42577 Netty: epoll transport denial of service via RST on half-closed TCP connection	13 May 202618:00	–	cvelist
Debian CVE	CVE-2026-42577	13 May 202618:00	–	debiancve
Github Security Blog	Netty epoll transport denial of service via RST on half-closed TCP connection	6 May 202623:10	–	github
NVD	CVE-2026-42577	13 May 202619:17	–	nvd
OSV	CGA-PCRM-JRQ4-V7HW	7 May 202616:47	–	osv
OSV	CLEANSTART-2026-AO61361 Security fixes for CVE-2024-6763, CVE-2025-11143, CVE-2025-12183, CVE-2025-12383, CVE-2025-66566, CVE-2025-67030, CVE-2026-1605, CVE-2026-24281, CVE-2026-24308, CVE-2026-42577, CVE-2026-42583, ghsa-355h-qmc2-wpwf, ghsa-3pxv-7cmr-fjr4, ghsa-445c-vh5m-36rj, ghsa-6fmv-xxpf-w3cw, ghsa-6hg6-v5c8-fphq, ghsa-72hv-8253-57qq, ghsa-7xrh-hqfc-g7qr, ghsa-crhr-qqj8-rpxc, ghsa-mj4r-2hfc-f8p6, ghsa-qh8g-58pp-2wxh, ghsa-rwm7-x88c-3g2p, ghsa-wjpw-4j6x-6rwh applied in versions: 3.8.1-r10, 3.8.1-r11, 3.8.1-r5, 3.8.1-r6, 3.8.1-r7, 3.8.1-r8, 3.8.1-r9	18 May 202613:03	–	osv

Source	Link
ubuntu	www.ubuntu.com/security/CVE-2026-42577
cve	www.cve.org/CVERecord
github	www.github.com/netty/netty/security/advisories/GHSA-rwm7-x88c-3g2p
github	www.github.com/netty/netty/pull/16689
github	www.github.com/netty/netty/commit/0ec3d97fab376e243d328ac95fbd288ba0f6e22d

02 Jun 2026 18:16Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.5

EPSS0.00051