Threat Intelligence Database

CVE-2026-15812 is a medium severity vulnerability in the kronosnet ACL subsystem (versions <= 1.34) used in Red Hat Enterprise Linux 10. When configured to manage dynamic links without network payload encryption, the system implicitly trusts the link ID in incoming packets. This allows a remote unauthenticated attacker to spoof a legitimate link ID and bypass ACL protections, injecting arbitrary data packets that may cause data corruption or service instability.

CVE-2026-15811 is a vulnerability in kronosnet (version <=1.34) used in Red Hat Enterprise Linux 10. The cryptographic configuration management fails to properly clear sensitive memory after changes, leaving encryption keys in memory. A local attacker with memory disclosure capabilities could retrieve these keys, potentially decrypting cluster communications or injecting malicious packets, causing cluster instability. The vulnerability has a medium severity rating with a CVSS score of 5.8. No official patch or remediation guidance is currently confirmed by Red Hat.

A vulnerability was found in the network packet de-fragmentation engine of kronosnet (Version affected <= 1.34). The internal reassembly code does not properly validate sequence numbers of incoming payload fragments. An attacker can exploit this lack of verification by transmitting malformed packets with corrupted sequence parameters. Under specific conditions, this forces the packet processing layer to parse data outside the designated bounds of the internal memory structures, causing an out-of-bounds memory access or heap corruption. This behavior can result in sudden application crashes or system instability.