Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : Unbound vulnerabilities (USN-8282-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8282-1 advisory. Andrew Griffiths discovered that Unbound did not properly handle certain DNSCrypt packets. A remote attacker could possib...

CVE-2023-53192

The CVE-2023-53192 issue is a Linux kernel bug in vxlan nexthop hashing. The nexthop code expected a 31-bit hash, but skb_get_hash() can return a 32-bit value which becomes negative in a signed int. This can trigger incorrect nexthop selection (nexthop_select_path_hthr) or out-of-bounds access in...