https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 01:59:04 +0000 https://vulnerability.circl.lu/vuln/cve-2026-97417 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()</p> <p>The timestamp-only fast path dereferences the option stream as *(__be32 *)ptr, which assumes 4-byte alignment that the TCP option stream does not guarantee. Use get_unaligned_be32() instead, which reads the value safely and already returns host byte order, so the htonl() on the comparison constant can be dropped.</p> <p>This matches the existing get_unaligned_be32() use later in the same function.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()</p> <p>The timestamp-only fast path dereferences the option stream as *(__be32 *)ptr, which assumes 4-byte alignment that the TCP option stream does not guarantee. Use get_unaligned_be32() instead, which reads the value safely and already returns host byte order, so the htonl() on the comparison constant can be dropped.</p> <p>This matches the existing get_unaligned_be32() use later in the same function.</p> https://vulnerability.circl.lu/vuln/cve-2026-97417