EUVD-2026-53271

In the Linux kernel, the following vulnerability has been resolved: gtp: check skbpulldata return in gtp1usendechoresp gtp1usendechoresp ignores skbpulldata's return value. Its caller gtp1uudpencaprecv only guarantees 16 bytes udphdr + gtp1header, but the pull requests 20 gtp1headerlong + udphdr...

CVE-2026-64577 gtp: check skb_pull_data() return in gtp1u_send_echo_resp()

In the Linux kernel, the following vulnerability has been resolved: gtp: check skbpulldata return in gtp1usendechoresp gtp1usendechoresp ignores skbpulldata's return value. Its caller gtp1uudpencaprecv only guarantees 16 bytes udphdr + gtp1header, but the pull requests 20 gtp1headerlong + udphdr...

CVE-2026-64575

In the Linux kernel, the following vulnerability has been resolved: bpf: tcp: fix double sock release on batch realloc bpfitertcpbatch releases the current batch via bpfitertcpputbatch, which drops the socket refs and rewrites each slot with the socket cookie, then grows the batch. cursk/endsk ar...

CVE-2026-64575

CVE-2026-64575 affects the Linux kernel’s BPF TCP iterator. The issue is a double release of socket resources during batch reallocation in bpf_iter_tcp_batch, where on realloc failure the code returns ERR_PTR() and leaves cur_sk

CVE-2026-64572 ipv4: fib: free fib_alias with kfree_rcu() on insert error path

In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: free fibalias with kfreercu on insert error path fibtableinsert publishes newfa into the leaf's falist with fibinsertalias before calling the fib entry notifiers. When a notifier fails, the error path removes newfa wit...

EUVD-2026-53263

In the Linux kernel, the following vulnerability has been resolved: mpls: fix NULL deref in mplsvalidfibdumpreq on CONFIGINET=n On CONFIGINET=n builds, mplsvalidfibdumpreq walks the parsed attribute table itself instead of calling ipvalidfibdumpreq. The RTAOIF arm passes tbRTAOIF to nlagetu32...

org.apache.qpid:apache-qpid-broker-j (>=10.0.0, <=10.0.1), org.apache.qpid:qpid-broker (>=10.0.0, <=10.0.1) +4 more potentially affected by CVE-2026-68074 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=10.0.0, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.1 Source cves: CVE-2026-68074 Source advisory: SNYK:JAVA-ORGAPACHEQPID-19352776...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to unchecked AMQP 1.0 list and map size/count handling in the ListConstructor and MapConstructor codec classes. An attacker can trigger excessive allocation and parser work by...

org.apache.qpid:apache-qpid-broker-j (>=10.0.0, <=10.0.1), org.apache.qpid:qpid-broker (>=10.0.0, <=10.0.1) +4 more potentially affected by CVE-2026-68060 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=10.0.0, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.1 Source cves: CVE-2026-68060 Source advisory: SNYK:JAVA-ORGAPACHEQPID-19352713...

org.apache.qpid:apache-qpid-broker-j (>=10.0.0, <=10.0.1), org.apache.qpid:qpid-broker (>=10.0.0, <=10.0.1) +4 more potentially affected by CVE-2026-68080 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=10.0.0, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.1 Source cves: CVE-2026-68080 Source advisory: SNYK:JAVA-ORGAPACHEQPID-19352510...

org.apache.qpid:apache-qpid-broker-j (>=10.0.0, <=10.0.1), org.apache.qpid:qpid-broker (>=10.0.0, <=10.0.1) +4 more potentially affected by CVE-2026-68077 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=10.0.0, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.1 Source cves: CVE-2026-68077 Source advisory: SNYK:JAVA-ORGAPACHEQPID-19352520...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion due to unchecked AMQP 1.0 type nesting in the SectionDecoderImpl and related codec constructors in broker-plugins/amqp-1-0-protocol. An unauthenticated attacker can trigger a StackOverflowError by sending a crafte...

org.apache.qpid:apache-qpid-broker-j (>=10.0.0, <=10.0.1), org.apache.qpid:qpid-broker (>=10.0.0, <=10.0.1) +4 more potentially affected by CVE-2026-68073 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=10.0.0, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.1 Source cves: CVE-2026-68073 Source advisory: SNYK:JAVA-ORGAPACHEQPID-19350837...

org.apache.qpid:apache-qpid-broker-j (>=10.0.0, <=10.0.1), org.apache.qpid:qpid-broker (>=10.0.0, <=10.0.1) +4 more potentially affected by CVE-2026-68078 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=10.0.0, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.1 Source cves: CVE-2026-68078 Source advisory: SNYK:JAVA-ORGAPACHEQPID-19500652...

org.apache.qpid:apache-qpid-broker-j (>=10.0.0, <=10.0.1), org.apache.qpid:qpid-broker (>=10.0.0, <=10.0.1) +4 more potentially affected by CVE-2026-68075 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=10.0.0, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.1 Source cves: CVE-2026-68075 Source advisory: SNYK:JAVA-ORGAPACHEQPID-19351108...

Mr.SIP — Updated!

SIP Security, Attack and Audit Framework Mr.SIP is a simple, console-bas...

com.confluex:qpid-in-a-can (0.2.0), com.dell.cpsd.common.messaging:common-testing (1.5.0) +37 more potentially affected by CVE-2026-68080 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=0.24, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =0.24, =2.0.0, =0.0.15, =1.0.0, =1.3.1, =1.3.1, =0.10, =0.10, =0.10, =0.10, =1.5.0, =1.3.1, =1.10.0 and more Source cves: CVE-2026-68080 Source advisory: MEND:CVE-2026-68080...

com.confluex:qpid-in-a-can (0.2.0), com.dell.cpsd.common.messaging:common-testing (1.5.0) +37 more potentially affected by CVE-2026-68078 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=0.24, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =0.24, =2.0.0, =0.0.15, =1.0.0, =1.3.1, =1.3.1, =0.10, =0.10, =0.10, =0.10, =1.5.0, =1.3.1, =1.10.0 and more Source cves: CVE-2026-68078 Source advisory: MEND:CVE-2026-68078...

com.confluex:qpid-in-a-can (0.2.0), com.dell.cpsd.common.messaging:common-testing (1.5.0) +37 more potentially affected by CVE-2026-68077 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=0.24, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =0.24, =2.0.0, =0.0.15, =1.0.0, =1.3.1, =1.3.1, =0.10, =0.10, =0.10, =0.10, =1.5.0, =1.3.1, =1.10.0 and more Source cves: CVE-2026-68077 Source advisory: MEND:CVE-2026-68077...

com.confluex:qpid-in-a-can (0.2.0), com.dell.cpsd.common.messaging:common-testing (1.5.0) +37 more potentially affected by CVE-2026-68075 via org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol (>=0.24, <=10.0.1)

org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol MAVEN version =0.24, =2.0.0, =0.0.15, =1.0.0, =1.3.1, =1.3.1, =0.10, =0.10, =0.10, =0.10, =1.5.0, =1.3.1, =1.10.0 and more Source cves: CVE-2026-68075 Source advisory: MEND:CVE-2026-68075...