CVE-2026-55068 free5GC: NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints

free5GC is an open-source implementation of the 5G core network. In 4.2.2 and earlier, the NRF RegisterNFInstance handler at PUT /nnrf-nfm/v1/nf-instances/nfInstanceID accepts NF Profiles without enforcing UUID format, nfStatus enum values, heartBeatTimer ranges, mandatory profile fields, or...

PT-2026-82968

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf conntrack expect: use conntrack GC to reap expectations This patch replaces the timer API by GC worker approach for expectations, as it already happened in many other subsystems. Use the existing conntrack GC worker...

PT-2026-82903

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf conntrack irc: fix parse dcc off-by-one OOB read parse dcc treats data end as an inclusive end pointer, but its only caller passes data limit = ib ptr + datalen, which points one past the last valid byte. The newlin...

CVE-2026-30063

An issue in the NF Discovery endpoint of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted snssais query...

CVE-2026-30045: Integer Overflow or Wraparound

An integer overflow in the /nnrf-disc/v1/nf-instances component of open5gs v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted HTTP/2 GET request...

CVE-2026-30063: Allocation of Resources Without Limits or Throttling

An issue in the NF Discovery endpoint of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted snssais query...

PT-2026-82529

An issue in the NF Discovery endpoint of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted snssais query...

CVE-2026-30063

The free5gc v4.0.1 software contains a vulnerability in its NF Discovery endpoint . An attacker can trigger a Denial of Service (DoS) by sending a crafted snssais query . According to the Rapid7 documentation, the root cause is the allocation of resources without limits or throttling . Exploitati...

CVE-2026-30063

An issue in the NF Discovery endpoint of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted snssais query...

EUVD-2026-67113

An issue in the NF Discovery endpoint of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted snssais query...

PT-2026-82518

An integer overflow in the /nnrf-disc/v1/nf-instances component of open5gs v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted HTTP/2 GET request...

CVE-2026-30063

An issue in the NF Discovery endpoint of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted snssais query...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: netfilter: nftables: The issue of underflow in the chain reference counter was fixed. The error in adding elements in the set element path causes the reference counter to be decremented twice—once when releasing an element and...

PT-2026-72607

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf nat: avoid invalid nat net pointer use on failed nf nat init We ran into below KASAN splat, which is mostly uninteresting, beside for having nf nat register fn in the call chain as a cause for the offending access:...

PT-2026-72439

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory bug and header corruption issue exists in the SIP NAT helper within the netfilter component. In the nf nat sip function, if a cloned or fragmented socket buffer SKB is reallocat...

PT-2026-72606

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf conncount: prevent connlimit drops for early confirmed ct Commit 69894e5b4c5e "netfilter: nft connlimit: update the count if add was skipped" introduced a regression where packets for valid connections are dropped...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2023-32233 — nftables Use-After-Free: Reproduction & Root...

CVE-2026-64006

A flaw was found in the Linux kernel's Netfilter nftables component. This vulnerability occurs during lshift and rshift operations when the source and destination registers point to the same memory location. An incorrect calculation of the carry value, using the modified destination instead of th...

CVE-2026-63858

A flaw was found in the Linux kernel's netfilter nftables subsystem. This vulnerability could lead to a denial of service for network filtering operations. The issue occurs because the process of deleting network hooks improperly modifies a protected list, which can disrupt how network...

SUSE-SU-2026:22763-1 Security update for the Linux Kernel (Live Patch 11 for SUSE Linux Enterprise 16)

This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.32.1 fixes various security issues The following security issues were fixed: - CVE-2026-31505: iavf: fix out-of-bounds writes in iavfgetethtoolstats bsc1263094. - CVE-2026-31533: net/tls: fix use-after-free in -EBUSY error path of...