6071 matches found
ECHO-0D6F-7FBE-C7FA
Bulletin has no description...
ECHO-428D-D3D6-1CC8
Bulletin has no description...
ECHO-5C3C-57C5-8FB2
Bulletin has no description...
ECHO-6486-9A91-3077
Bulletin has no description...
ECHO-895D-0FCF-45BD
Bulletin has no description...
ECHO-2EA7-D2C8-D549
Bulletin has no description...
ECHO-84B2-B2CE-8A5F
Bulletin has no description...
ECHO-89C6-C3E9-D8D2
Bulletin has no description...
AZL-90609 CVE-2026-52924 affecting package kernel for versions less than 6.6.143.1-1
In the Linux kernel, the following vulnerability has been resolved: sctp: purge outqueue on stale COOKIE-ECHO handling sctpstreamupdate is only invoked when the association is moved into COOKIEWAIT during association setup/reconfiguration. In this path, the outbound stream scheduler state...
CVE-2026-52924
In the Linux kernel, the following vulnerability has been resolved: sctp: purge outqueue on stale COOKIE-ECHO handling sctpstreamupdate is only invoked when the association is moved into COOKIEWAIT during association setup/reconfiguration. In this path, the outbound stream scheduler state...
CVE-2026-52924 sctp: purge outqueue on stale COOKIE-ECHO handling
In the Linux kernel, the following vulnerability has been resolved: sctp: purge outqueue on stale COOKIE-ECHO handling sctpstreamupdate is only invoked when the association is moved into COOKIEWAIT during association setup/reconfiguration. In this path, the outbound stream scheduler state...
CVE-2026-52924 sctp: purge outqueue on stale COOKIE-ECHO handling
In the Linux kernel, the following vulnerability has been resolved: sctp: purge outqueue on stale COOKIE-ECHO handling sctpstreamupdate is only invoked when the association is moved into COOKIEWAIT during association setup/reconfiguration. In this path, the outbound stream scheduler state...
CVE-2026-52924
The CVE-2026-52924 entry describes a Linux kernel SCTP use-after-free vulnerability triggered during Stale COOKIE-ECHO handling. In COOKIE_WAIT transitions, sctp_stream_update() can leave a stale out_curr pointer after rolling back from COOKIE_ECHOED to COOKIE_WAIT, so scheduler paths (FCFS/RR/PR...
CVE-2026-52924
In the Linux kernel, the following vulnerability has been resolved: sctp: purge outqueue on stale COOKIE-ECHO handling sctpstreamupdate is only invoked when the association is moved into COOKIEWAIT during association setup/reconfiguration. In this path, the outbound stream scheduler state...
ECHO-4E4C-B37E-F35F
Bulletin has no description...
ECHO-0B2F-27C4-24AA
Bulletin has no description...
ECHO-03EA-A4EB-03CB Heap out-of-bounds read during cleanup of the GSSAPI "auth-indicators" array (missing trailing NULL). This array is part of Red Hat's downstream GSSAPI authentication-indicators patch and is scoped by upstream to "Red Hat Enterprise Linux versions of OpenSSH". Echo builds from Debian openssh 1:10.4p1-1 (sid), which does not carry that patch: gss-serv.c, auth2-gss.c and gss-genr.c contain zero references to auth indicators, so the vulnerable code path is not present. Debian rates it undetermined/unimportant. https://security-tracker.debian.org/tracker/CVE-2026-55654 https://bugzilla.redhat.com/show_bug.cgi?id=2462493
Bulletin has no description...
ECHO-2791-8592-919C
Bulletin has no description...