BIT-GOLANG-2026-78669 Excessive CPU consumption from repeated initial window changes in net/http

A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...

BIT-GOLANG-2026-78667 Lack of limit on size of parsed Range headers in net/http

When parsing a Range header containing a large number of small ranges, FileServerFS, ServeContent, and ServeFileFS can consume an excessive amount of CPU...

BIT-GOLANG-2026-78663 Double flow control refund on HTTP/2 server streams in net/http

The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...

BIT-GOLANG-2026-78660 HTTP/2 transport accepts malformed framing-related headers in net/http

Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...

BIT-GOLANG-2026-78659 HTTP/2 server memory exhaustion due to Trailer headers in net/http

When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...

BIT-GOLANG-2026-56866 HTTP/1 client connection desynchronization after CONNECT rejection in net/http

When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the request headers. If the server rejects the CONNECT request with a non-2xx keep-alive response, Transport returns the connection to the idle...

CVE-2026-49868: Out-of-bounds Read

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.07, parsereply in sys/net/applicationlayer/dhcpv6/client.c omits minimum-length validation before passing IAPD and IANA option bodies to sub-option parsers. A...

Security Update for Microsoft .NET Core (October 2026)

The Microsoft .NET Core installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network...

Linux net/tipc/socket.c Heap Buffer Overflow DoS

The vulnerability of the tipcskconnprotorcv function in the net/tipc/socket.c component of the Linux operating system is related to the improper implementation of thread management. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Linux net/sched/sch_hfsc.c Heap Buffer Overflow DoS

The vulnerability of the updatevf function in the net/sched/schhfsc.c component of the Linux kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux SCTP Verify Function Data Compromise

The vulnerabilities of the functions sctpverifyasconf and sctpverifyparam in the net/sctp/smmakechunk.c component of the Linux kernel are related to insufficient resource control during their existence. Exploiting these vulnerabilities could allow a remote attacker to compromise the confidentiali...

Oracle Linux 9 : kernel (ELSA-2026-83156)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-83156 advisory. - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry Jan Polensky RHEL-271472 CVE-2026-80985 - net/smc: bound the peer rkey counts in...

Oracle Linux 10 : kernel (ELSA-2026-83207)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-83207 advisory. - net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry Jan Polensky RHEL-271473 CVE-2026-80985 - net/smc: bound the peer rkey counts in...

Security Update for Microsoft .NET Core SDK (October 2026)

The Microsoft .NET Core SDK installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an...

Linux Distros Unpatched Vulnerability : CVE-2026-96957

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-96957 Note that...

Linux sch_codel CVE

The vulnerability of the net/sched/schcodel.c component in the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Linux kernel vxlan_gro_prepare_receive Heap Buffer Overflow DoS

The vulnerability of the vxlangropreparereceive function in the drivers/net/vxlan/vxlancore.c component of the Linux kernel is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protect...

Linux kernel addrconf_dad_failure() Buffer Overflow

The vulnerability of the addrconfdadfailure function in the net/ipv6/addrconf.c component of the Linux kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility ...

Linux kernel Function Use-After-Free

The vulnerability of the managdcreatemanawqcq function in the drivers/net/ethernet/microsoft/mana/gdmamain.c file of the Linux kernel is related to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux netlink Heap Buffer Overflow DoS

The vulnerability of the net/tipc/netlink.c component in the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...