CVE-2026-9054

An attacker sending tcp, il, rudp, rudp, or gre packets with a length less than the header size would trigger a kernel panic...

AZL-87981 CVE-2026-46597 affecting package kubevirt for versions less than 1.7.1-7

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...

AZL-87254 CVE-2026-46597 affecting package cri-o 1.30.1-1

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...

AZL-87630 CVE-2026-46597 affecting package docker-buildx for versions less than 0.14.0-13

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...

AZL-88182 CVE-2026-46597 affecting package packer for versions less than 1.9.5-15

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...

AZL-88203 CVE-2026-46598 affecting package packer for versions less than 1.9.5-15

For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used...

AZL-87708 CVE-2026-46598 affecting package docker-compose for versions less than 2.27.0-12

For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used...

AZL-87278 CVE-2026-46597 affecting package podman 5.6.1-10

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...

AZL-87329 CVE-2026-46598 affecting package podman 5.6.1-10

For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used...

AZL-87741 CVE-2026-46597 affecting package gh for versions less than 2.62.0-16

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...

AZL-87900 CVE-2026-46597 affecting package kubernetes for versions less than 1.30.10-25

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...

AZL-87444 CVE-2026-46597 affecting package cf-cli for versions less than 8.7.11-6

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...

CVE-2026-46597

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...

CVE-2026-46598

For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used...

AZL-87405 CVE-2026-46597 affecting package cert-manager for versions less than 1.12.15-9

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...

AZL-87218 CVE-2026-46598 affecting package cri-o 1.30.1-1

For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used...

AZL-88083 CVE-2026-46597 affecting package moby-engine for versions less than 25.0.3-18

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...

AZL-87696 CVE-2026-46597 affecting package docker-compose for versions less than 2.27.0-11

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...

AZL-87185 CVE-2026-46598 affecting package buildah 1.43.1-3

For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used...

AZL-88347 CVE-2026-46598 affecting package telegraf for versions less than 1.31.0-23

For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used...