Threats Tagged 'cve-2026-75538'

Red Hat has issued a security advisory for an important update to Erlang packages used in Red Hat OpenStack Services on OpenShift 18.0. The update addresses two security vulnerabilities in the Erlang OTP public_key module: certificate chain forgery due to improper trust chain validation (CVE-2026-42789) and certificate validation bypass allowing hostname spoofing (CVE-2026-42790). These issues could undermine the security of certificate validation processes. A patch is available and should be applied to affected systems.

A vulnerability in Erlang's inet driver when using {packet,4} mode allows an attacker connecting to an open TCP port to cause a signed overflow in packet length calculation. This overflow can corrupt the receive buffer and allocator metadata, likely causing the BEAM VM to crash. Exploitation for remote code execution is considered extremely unlikely. The issue affects multiple OTP and erts versions prior to specific fixed releases. Patches are available and have been released by Ubuntu.

CVE-2026-75538 is an integer overflow vulnerability in Erlang OTP's inet driver when using {packet,4} mode on an open TCP port. An attacker can trigger a signed overflow in packet length calculation, causing a buffer overflow that corrupts the BEAM VM allocator metadata and likely crashes the VM. Exploitation for remote code execution is considered extremely unlikely. This affects multiple OTP and erts versions prior to specific fixed releases.