CVE-2026-127125

P-Net versions prior to 1.0.4 are vulnerable to a NULL pointer dereference during the handling of fragmented responses in an RPC session. The issue occurs because the software fails to verify the existence of an Application Relationship before processing a resent response fragment. Specifically, ...

CVE-2026-127124

P-Net versions prior to 1.0.4 are vulnerable to a denial of service (DoS) condition due to a resource exhaustion flaw in the RPC session pool. The software fails to implement a timeout for RPC sessions allocated to fragments of requests with unknown activity UUIDs, or for sessions lacking an Appl...

USN-8529-1: Linux kernel vulnerabilities

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-43503 Several security issues...