CVE-2026-50252

NLnet Labs Unbound 1.4.22–1.25.1 is vulnerable when SO_REUSEPORT is enabled by default. The resolver partitions UDP source ports into per-thread subsets at startup; the kernel’s SO_REUSEPORT load balancer deterministically routes queries to a specific thread, causing outgoing queries to use ports...