Linux Distros Unpatched Vulnerability : CVE-2026-40209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker might be able to cause outgoing TCP connections to backend to be stuck until a timeout occurs instead of being released immediately, by sending IXFR...

CVE-2026-40209 Denial of service via IXFR queries

An attacker might be able to cause outgoing TCP connections to backend to be stuck until a timeout occurs instead of being released immediately, by sending IXFR queries. This could be used to cause a denial of service if there is a limit to the number of concurrent connections to this backend, or...

DNSdist -- vulnerabilities

The DNSdist team reports: CVE-2026-40011: Prometheus denial of service via crafted DNS queries CVE-2026-42004: EDNS options smuggling CVE-2026-42005: Insufficient input validation of internal web server CVE-2026-40208: Denial of service via DoH3 queries CVE-2026-40209: Denial of service via IXFR...