PT-2026-95012

Name of the Vulnerable Software and Affected Versions mport versions prior to 2.7.8 Description The ping function in libmport/ping.c fails to validate icmp id or icmp seq when accepting ICMP replies and uses a fixed IP-header offset instead of ip hl for parsing. A network attacker capable of...

CVE-2026-46037

In the Linux kernel, the following vulnerability has been resolved: ipv4: icmp: validate reply type before using icmppointers Extended echo replies use ICMPEXTECHOREPLY as the outbound reply type. That value is outside the range covered by icmppointers, which only describes the traditional ICMP...