net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...

ROS-20260928-73-0064

The vulnerability of the mptcpschedulework function in the net/mptcp/protocol.c module of the MPTCP protocol implementation in the Linux operating system is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow a malicious actor t...

ROS-20260928-73-0106

The vulnerability of the inetdiagmsgsctpladdrsfill function in the net/sctp/diag.c module of the SCTP protocol implementation in the Linux operating system is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to...

CVE-2026-18416: Out-of-bounds Read

The CoAP link-format helper matchpathuri in subsys/net/lib/coap/coaplinkformat.c compares a registered resource path against the URI carried in a Uri-Query href= option. That URI is not NUL terminated, but the inner character loop advanced its index k once per path character without ever testing ...

PT-2026-102355

Name of the Vulnerable Software and Affected Versions ZoAP versions 1.8.0 through 1.9.x Description The CoAP link-format helper match path uri in subsys/net/lib/coap/coap link format.c contains an out-of-bounds read. The issue occurs when comparing a registered resource path against a URI in a...

ROS-20260928-73-0118

The vulnerability of the functions ah6outputdone and ah6output in the Linux kernel’s net/ipv6/ah6.c file is related to incorrect calculation of buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260928-73-0081

The vulnerability of the mgmtindexremoved function in the net/bluetooth/mgmt.c module of the Bluetooth subsystem of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20260928-73-0125

The vulnerability of the udptunnelnicnetdeviceevent function in the net/ipv4/udptunnelnic.c module of the Linux kernel’s IPv4 protocol implementation is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow an attacker to...

ROS-20260928-73-0008

The vulnerability of the ndoopen function in the drivers/net/usb/asixdevices.c module of the Linux USB device driver framework is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

ROS-20260928-73-0053

The vulnerability of the net/sctp component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260928-73-0077

The vulnerability of the tcfconnmarkdump function in the net/sched/actconnmark.c module of the net/sched/actconnmark subsystem of the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to access protected information or...

ROS-20260928-73-0051

The vulnerability of the vsock AssignTransport function in the net/vmwvsock/afvsock.c component of the Linux kernel is related to insufficient locking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260928-73-0069

The vulnerability of the besendpkttobmc function in the drivers/net/ethernet/emulex/benet/bemain.c file of the be2net network device driver in the Linux kernel is related to the swapping of pointers. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20260928-73-0076

The vulnerability of the tcfifedump function in the net/sched/actife.c module of the net/sched/actife subsystem of the Linux operating system is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260928-73-0063

The vulnerability of the mptcppmdeladdtimer function in the net/mptcp/pm.c module of the MPTCP protocol implementation in Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20260928-73-0046

The vulnerability of the unixwalkscc function in the net/unix/garbage.c module, which is part of the Linux kernel’s networking functions, stems from the lack of initialization for a variable. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

PT-2026-102412

Name of the Vulnerable Software and Affected Versions Zephyr LwM2M client affected versions not specified Description The parse write op function in subsys/net/lib/lwm2m/lwm2m message handling.c contains a NULL pointer dereference when handling inbound CoAP WRITE/CREATE requests with a Block1...

ROS-20260928-73-0042

The vulnerability of the modules net/sctp/smmakechunk.c and net/sctp/smstatefuns.c in the Linux operating system is related to the disclosure of information due to timing mismatches. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected...

ROS-20260928-73-0079

The vulnerability of the sctptransportupdaterto function in the net/sctp/transport.c module of the Linux operating system’s SCTP protocol implementation is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20260928-73-0047

The vulnerability of the xfrmstatedeletetunnel function in the net/xfrm/xfrmstate.c module of the Linux kernel is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...