CVE-2026-89538

CVE-2026-89538 affects the Linux kernel's SUNRPC component, specifically the gss_krb5_unwrap_v2() function. A remote peer holding a valid GSS context can send a Kerberos v2 wrap token whose 16-bit "extra count" (ec) field exceeds the plaintext length—a structurally malformed token per RFC 4121 . ...

CVE-2026-89538 SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field gsskrb5unwrapv2 sets buf-len to a logical length, which can be much smaller than head0.iovlen the allocated receive-page capacity. It then calls xdrbuftrim with a trim...

CVE-2026-89538

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field gsskrb5unwrapv2 sets buf-len to a logical length, which can be much smaller than head0.iovlen the allocated receive-page capacity. It then calls xdrbuftrim with a trim...

CVE-2026-89538 SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field gsskrb5unwrapv2 sets buf-len to a logical length, which can be much smaller than head0.iovlen the allocated receive-page capacity. It then calls xdrbuftrim with a trim...

CVE-2026-80986

In the Linux kernel, the following vulnerability has been resolved: net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages On a link whose device has maxrecvsge == 1 there is no shared v2 receive buffer, and smcllcsaveaddlinkrkeys takes the v2 extension from 44 bytes past the start of the...

CVE-2026-71641

An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via thenteraction between trajserver, poscmd2odom, and the EGOReplanFSM emergency recovery logic...

EUVD-2026-75872

An issue in EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via the checkCollisionCallback, execFSMCallback, planFromGlobalTraj in egoreplanfsm.cpp...

EUVD-2026-75873

An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows unsafe vehicle motion via improper handling of expired trajectory data in the replanning pipeline...

EUVD-2026-75874

An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via the EGOReplanFSM component...

EUVD-2026-75875

An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via the EGOReplanFSM::checkCollisionCallback...

CVE-2026-71641

An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via thenteraction between trajserver, poscmd2odom, and the EGOReplanFSM emergency recovery logic...

PT-2026-96479

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden gss krb5 unwrap v2 against short tokens gss krb5 unwrap v2 reads the EC and RRC header fields at ptr+4 and ptr+6 before validating that the token is at least GSS KRB5 TOK HDR LEN 16 bytes long, and its rotate left...

CVE-2026-71641

An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via thenteraction between trajserver, poscmd2odom, and the EGOReplanFSM emergency recovery logic...

PT-2026-89876

Name of the Vulnerable Software and Affected Versions ZJU-FAST-Lab EGO-Planner-v2 versions prior to commit 5c99a95880401e2599638d567abc0e240396cb42 Description A flaw exists that allows an attacker to cause a denial of service. This occurs through the interaction between the traj server and poscm...

EUVD-2026-76111

An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via thenteraction between trajserver, poscmd2odom, and the EGOReplanFSM emergency recovery logic...

A Three-Axis Stress Test of LLM Vs Classical ML for Network Intrusion Detection under Distribution Shift and Adversarial Evasion

Large language models are increasingly benchmarked against classical machine learning for network intrusion detection NIDS, almost always using same-dataset evaluation, and that protocol turns out to be incomplete. Evaluating XGBoost and RoBERTa-LoRA on two independently collected NetFlow v2...

PT-2026-96340

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject short RFC 4121 MIC tokens in gss krb5 verify mic v2 gss krb5 verify mic v2 reads the token ID at ptr0..1, the flags byte at ptr2, and padding at ptr3..7, then passes ptr + GSS KRB5 TOK HDR LEN and cksum len to gss...

CVE-2026-71641

An issue in ZJU-FAST-Lab EGO-Planner-v2 (all versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 ) allows an attacker to cause a denial of service . The vulnerability stems from an interaction between traj_server , poscmd_2_odom , and the EGOReplanFSM emergency recovery logic. Specific...

CVE-2026-71641: Uncontrolled Resource Consumption

An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of service via thenteraction between trajserver, poscmd2odom, and the EGOReplanFSM emergency recovery logic...

CVE-2026-89538: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field gsskrb5unwrapv2 sets buf-len to a logical length, which can be much smaller than head0.iovlen the allocated receive-page capacity. It then calls xdrbuftrim with a trim...