Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: xfrm6: fixed an issue where uninitialized saddr values were used in xfrm6getsaddr. The xfrm6getsaddr function does not check the return value of ipv6devgetsaddr. When ipv6devgetsaddr fails to find a suitable source address...

CVE-2026-66732

Sonic 3 A.I.R. before commit 2492d18 contains a missing source address validation vulnerability in ConnectionManager where established connections are resolved by a two-byte local connection handle alone without verifying that the datagram source address matches the registered remote address for...

CVE-2026-66732 Sonic 3 A.I.R. Missing Source Address Validation in ConnectionManager

Sonic 3 A.I.R. before commit 2492d18 contains a missing source address validation vulnerability in ConnectionManager where established connections are resolved by a two-byte local connection handle alone without verifying that the datagram source address matches the registered remote address for...

CVE-2026-66732 Sonic 3 A.I.R. Missing Source Address Validation in ConnectionManager

Sonic 3 A.I.R. before commit 2492d18 contains a missing source address validation vulnerability in ConnectionManager where established connections are resolved by a two-byte local connection handle alone without verifying that the datagram source address matches the registered remote address for...

EUVD-2026-53875

Sonic 3 A.I.R. before commit 2492d18 contains a missing source address validation vulnerability in ConnectionManager where established connections are resolved by a two-byte local connection handle alone without verifying that the datagram source address matches the registered remote address for...

CVE-2026-66732

Sonic 3 A.I.R. before commit 2492d18 contains a missing source address validation vulnerability in ConnectionManager: established connections are resolved by a two-byte local connection handle without verifying the datagram source against the registered remote address. An on-path attacker observi...

CVE-2026-71316

creationtimestamp| type| source ---|---|--- 2026-08-06 00:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mseqdchgvo2t 2026-08-06 04:31:21+00:00| seen| https://gist.github.com/alon710/a33e8f1d3990c5613ef07342bcfbda1b...

CVE-2026-70593

creationtimestamp| type| source ---|---|--- 2026-08-04 22:30:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/iw3rld4msreml 2026-08-05 02:31:21+00:00| seen| https://gist.github.com/alon710/8b519f2c594fb49b15bc37a85db39cf9...

CVE-2026-64564 sctp: don't free the ASCONF's own transport in DEL-IP processing

In the Linux kernel, the following vulnerability has been resolved: sctp: don't free the ASCONF's own transport in DEL-IP processing sctpprocessasconf caches the transport the ASCONF chunk is processed against in asconf-transport == chunk-transport, set once in sctprcv. For an ASCONF located...

CVE-2026-69247

creationtimestamp| type| source ---|---|--- 2026-08-04 00:32:44+00:00| seen| https://gist.github.com/alon710/aae79fe7bcf7e7234c2912679ec8c451...

ldns: ldns: Off-path poisoning attacks due to insufficient query-response matching

A flaw was found in ldns. When applications use ldns as a resolver over User Datagram Protocol UDP, it fails to properly match the query's destination address and port with the response's source address and port. Additionally, the query ID and question are not matched with the response. This...

GHSA-H669-8M4G-R2HC

creationtimestamp| type| source ---|---|--- 2026-07-31 03:34:09+00:00| seen| https://gist.github.com/alon710/0adfedd2017833afe3a395108d8a9b0f...

GHSA-HC4M-Q9JH-XW4J

creationtimestamp| type| source ---|---|--- 2026-07-28 16:31:30+00:00| seen| https://gist.github.com/alon710/92ad6f547c2ba0c3ac7a937f90c439cc...

CVE-2026-45812

creationtimestamp| type| source ---|---|--- 2026-07-24 13:12:55+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrfgkps3ci24...

CVE-2026-50243

creationtimestamp| type| source ---|---|--- 2026-07-22 14:31:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrajyjtrrv2e...

golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation

A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the...

CVE-2026-57709

creationtimestamp| type| source ---|---|--- 2026-07-16 08:16:26+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqsba2n3x2p...

CVE-2026-54684

creationtimestamp| type| source ---|---|--- 2026-07-14 23:58:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnfxhbupl25 2026-07-27 09:01:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmjv6zbsa27 2026-07-27 09:01:06+00:00| seen|...

DEBIAN-CVE-2026-47737

Puma is a Ruby/Rack web server built for parallelism. From 5.5.0 until 7.2.1 and 8.0.2, Puma is vulnerable to source IP spoofing when setremoteaddress proxyprotocol: :v1 is enabled and persistent connections are used because Puma incorrectly re-parses PROXY protocol headers after each keep-alive...

CVE-2026-47737

Puma is a Ruby/Rack web server built for parallelism. From 5.5.0 until 7.2.1 and 8.0.2, Puma is vulnerable to source IP spoofing when setremoteaddress proxyprotocol: :v1 is enabled and persistent connections are used because Puma incorrectly re-parses PROXY protocol headers after each keep-alive...