Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098814)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098814 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: start using dstdevrcu Change icmpv4xrlimallow, ipdefrag to prevent possible UAF. Change...

CVE-2026-80350: Server-Side Request Forgery (SSRF)

OneUptime's webhook target check rejects private and loopback addresses given in IPv4 form and a small set of IPv6 forms, but has no case for the IPv4-mapped IPv6 range. The webhook delivery path calls SSRFProtection.validateWebhookTargetIsSafe, and the host-literal screening inside...

CVE-2026-18664: Improper Access Control

When ranges are used for access control i.e. of the form 1.2.3.4-1.2.3.25, because NSD wrongly compares the IP address with the range on little endian systems, IPs that were meant to be allowed may be denied, and, IPs that were meant to be denied access could be allowed. An IPv4 address is compar...

Linux TCP AO Function Use-After-Free

The vulnerability of the tcpaoverifyhash function in the net/ipv4/tcpao.c module of the Linux operating system’s IPv4 protocol implementation is related to an incorrect session expiration time. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrit...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104599)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104599 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don't ignore error route in local/main tables. When CONFIGIPMULTIPLETABLES is enabled...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-104533)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104533 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don't ignore error route in local/main tables. When CONFIGIPMULTIPLETABLES is enabled...

CVE-2026-52776 Trestle URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.0

Compliance-trestle Trestle is a tooling platform for managing compliance as code. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, the URLSecurityValidator that guards trestle's remote-fetch paths against server-side request forgery can be bypassed to reach loopback, link-local,...

CVE-2026-52776

compliance-trestle (Trestle), a Python tooling platform for managing compliance-as-code via OSCAL, contains an SSRF bypass in its URLSecurityValidator (trestle/core/remote/security.py). The validator fails to canonicalize IPv4-mapped IPv6 literals (e.g., [::ffff:169.254.169.254]) before network m...

CVE-2026-52776 Trestle URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.0

Compliance-trestle Trestle is a tooling platform for managing compliance as code. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, the URLSecurityValidator that guards trestle's remote-fetch paths against server-side request forgery can be bypassed to reach loopback, link-local,...

CVE-2026-52776 Trestle URLSecurityValidator SSRF allowlist bypass via IPv4-mapped IPv6 and 0.0.0.0

Compliance-trestle Trestle is a tooling platform for managing compliance as code. In versions before 3.12.4 and versions 4.0.0 through 4.0.3, the URLSecurityValidator that guards trestle's remote-fetch paths against server-side request forgery can be bypassed to reach loopback, link-local,...

ROS-20260825-73-0009

The vulnerability of the tcpdisconnect function in the net/ipv4/tcp.c module of the Linux operating system’s IPv4 protocol implementation is related to improper release of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux Kernel TCP BPF Buffer Overflow DoS

The vulnerability of the tcpbpfsendverdict function in the net/ipv4/tcpbpf.c module of the Linux operating system’s IPv4 protocol implementation leads to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel IPv4 Protocol DoS

The vulnerability in the espoutputdone function within net/ipv4/esp4.c of the Linux kernel’s IPv4 implementation is related to incomplete cleanup of temporary or auxiliary resources. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

CLSA-2026-1787571818 kernel: Fix of 13 CVEs

mpls: Use in6devrcu and devnetrcu in mplsforward and mplsxmit. - net: l3mdev: use skbdstdevrcu in l3mdevl3out - ipv4: start using dstdevrcu - tcp: use dstdevrcu in tcpfastopenactivedisableofocheck CVE-2025-68188 - tcpmetrics: use dstdevnetrcu CVE-2025-40075 - net: use dstdevrcu in sksetupcaps...

CVE-2026-74656

A flaw was found in the Linux kernel's IPv4 networking stack. A use-after-free vulnerability exists in the fibnhcupdatemtu function due to a race condition during nexthop exception table updates. This allows for a scenario where memory can be freed while still being accessed, which can lead to a...

ip-address: ip-address: Server-Side Request Forgery via IPv4-mapped/NAT64 IPv6 address misclassification

A flaw was found in the ip-address library. This library, used for parsing and manipulating IPv4 and IPv6 addresses in JavaScript, is vulnerable to Server-Side Request Forgery SSRF due to incorrect classification of IPv4-mapped/NAT64 IPv6 addresses. An attacker could exploit this misclassificatio...

Node.js: Improper certificate validation for non-canonical IPv4 hostnames allows DNS SANs to authenticate IP endpoints

A flaw was discovered in TLS hostname verification that allowed certificates with only DNS Subject Alternative Names to authenticate IP endpoints when clients connected using non-canonical IPv4 address formats. The verification function failed to classify these alternate spellings as IP addresses...

SUSE CVE-2026-74669

In the Linux kernel, the following vulnerability has been resolved: ipvs: clear IPv4 options after rebasing tunnel ICMP errors ipvsinicmp rebases an skb from the outer ICMP packet to the quoted original request before passing it to icmpsend. However, IPCBskb-opt still describes the outer IPv4...

AZL-97091 CVE-2026-74669 affecting package kernel for versions less than 6.6.152.1-1

In the Linux kernel, the following vulnerability has been resolved: ipvs: clear IPv4 options after rebasing tunnel ICMP errors ipvsinicmp rebases an skb from the outer ICMP packet to the quoted original request before passing it to icmpsend. However, IPCBskb-opt still describes the outer IPv4...

CVE-2026-74669

In the Linux kernel, the following vulnerability has been resolved: ipvs: clear IPv4 options after rebasing tunnel ICMP errors ipvsinicmp rebases an skb from the outer ICMP packet to the quoted original request before passing it to icmpsend. However, IPCBskb-opt still describes the outer IPv4...