Threats Tagged 'cve-2026-42009'

CVE-2026-26740 is a high severity vulnerability affecting Red Hat AI Inference Server 3.2.2 (ROCm). It is listed in a Red Hat security advisory but no official fix or patch is currently available. The vulnerability involves an issue classified under multiple CWEs including CWE-787 (out-of-bounds write), indicating potential memory corruption. The advisory does not provide detailed technical exploitation information or known exploits in the wild. No affected version ranges are explicitly stated beyond the product name and version 3.2.2. The vendor advisory does not mention any remediation or mitigation steps, nor does it indicate that the issue is already mitigated.

A vulnerability in the gnutls library used by Red Hat Enterprise Linux 10 involves improper handling of Datagram Transport Layer Security (DTLS) packet reordering. The comparator function for DTLS packets does not correctly handle duplicate sequence numbers, which can cause unstable packet ordering or undefined behavior, leading to denial of service. This issue has a CVSS score of 7.5 and is rated as high severity. Red Hat has released security updates addressing this flaw in gnutls packages.