CVE-2026-90111: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ip6mr: do not clone dst in ip6mrcachereport IPv6 input attaches a non-refcounted NOREF dst to skbs under RCU. When an ingress multicast packet misses MFC lookup, ip6mrcacheunresolved places the skb onto the unresolved queue,...

CVE-2026-73462

On affected platforms running Arista EOS with IGMP Internet Group Management Protocol snooping configured enabled by default on all VLANs, a network-adjacent unauthenticated attacker can send malformed network packets on an affected VLAN to cause the IGMP snooping agent to terminate unexpectedly...

CVE-2026-73462 On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (enabled by default on all VLANs), a network-adjacent unauthenticated attacker can send malformed network packets on an affected VLAN to cause the I

On affected platforms running Arista EOS with IGMP Internet Group Management Protocol snooping configured enabled by default on all VLANs, a network-adjacent unauthenticated attacker can send malformed network packets on an affected VLAN to cause the IGMP snooping agent to terminate unexpectedly...

EUVD-2026-81010

On affected platforms running Arista EOS with IGMP Internet Group Management Protocol snooping configured enabled by default on all VLANs, a network-adjacent unauthenticated attacker can send malformed network packets on an affected VLAN to cause the IGMP snooping agent to terminate unexpectedly...

CVE-2026-73462

CVE-2026-73462 affects the IGMP snooping agent in Arista EOS . An adjacent, unauthenticated attacker can send malformed packets to trigger an out-of-bounds read (CWE-125) , crashing the agent and causing multicast traffic to flood all ports on the affected VLAN. Repeated exploitation may lead to ...

CVE-2026-73462 On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (enabled by default on all VLANs), a network-adjacent unauthenticated attacker can send malformed network packets on an affected VLAN to cause the I

On affected platforms running Arista EOS with IGMP Internet Group Management Protocol snooping configured enabled by default on all VLANs, a network-adjacent unauthenticated attacker can send malformed network packets on an affected VLAN to cause the IGMP snooping agent to terminate unexpectedly...

CVE-2026-73468

A specially crafted packet can cause the premature expiry of multicast forwarding state on affected interfaces, potentially resulting in temporary multicast traffic loss during the affected period...

CVE-2026-73468

CVE-2026-73468 affects Arista EOS platforms configured with PIM Sparse Mode (both IPv4 and IPv6, in default or non-default VRFs). A specially crafted packet can cause premature expiry of multicast forwarding state , resulting in temporary loss of multicast traffic forwarding. The underlying weakn...

CVE-2026-73468 Security Advisory 0175

A specially crafted packet can cause the premature expiry of multicast forwarding state on affected interfaces, potentially resulting in temporary multicast traffic loss during the affected period...

EUVD-2026-80592

A specially crafted packet can cause the premature expiry of multicast forwarding state on affected interfaces, potentially resulting in temporary multicast traffic loss during the affected period...

CVE-2026-73468 Security Advisory 0175

A specially crafted packet can cause the premature expiry of multicast forwarding state on affected interfaces, potentially resulting in temporary multicast traffic loss during the affected period...

CVE-2026-73468: Always-Incorrect Control Flow Implementation

A specially crafted packet can cause the premature expiry of multicast forwarding state on affected interfaces, potentially resulting in temporary multicast traffic loss during the affected period...

CVE-2026-73462: Out-of-bounds Read

On affected platforms running Arista EOS with IGMP Internet Group Management Protocol snooping configured enabled by default on all VLANs, a network-adjacent unauthenticated attacker can send malformed network packets on an affected VLAN to cause the IGMP snooping agent to terminate unexpectedly...

PT-2026-93425

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A specially crafted packet can cause the premature expiry of multicast forwarding state on affected interfaces. This may lead to temporary multicast traffic loss...

PT-2026-93914

On affected platforms running Arista EOS with IGMP Internet Group Management Protocol snooping configured enabled by default on all VLANs, a network-adjacent unauthenticated attacker can send malformed network packets on an affected VLAN to cause the IGMP snooping agent to terminate unexpectedly...

SUSE SLES12 Security Update : kernel (Live Patch 86 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:4192-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:4192-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.323 fixes one security issue: The following security issue was fixed: - CVE-2026-64423:...

TencentOS Server 4: corosync (TSSA-2026:1005)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1005 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Security update for the Linux Kernel (Live Patch 58 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.235 fixes various security issues: The following security issues were fixed: CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction bsc1275458. CVE-2026-68138: net/sched: serialize qdiscrtablist...

Security update for the Linux Kernel (Live Patch 86 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.323 fixes one security issue: The following security issue was fixed: CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction bsc1275458. Patch Instructions: To install this SUSE update use the SUSE...

SUSE-SU-2026:4183-1 Security update for the Linux Kernel (Live Patch 20 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.78 fixes various security issues: The following security issues were fixed: - CVE-2026-64423: ipv4: igmp: remove multicast group from hash table on device destruction bsc1275458. - CVE-2026-68138: net/sched: serialize qdiscrtablist...