CVE-2026-42009

Monday, May 18, 2026

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to unstable packet ordering or undefined behavior, resulting in a denial of service.

Affected Software

Vendor	Product	Version Range	Status
Red Hat	Red Hat Enterprise Linux 10	`0:3.8.10-4.el10_2 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	`0:3.8.9-9.el10_0.19 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	`0:3.3.29-9.el7_9.1 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8	`0:3.6.16-8.el8_10.6 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8	`0:3.6.16-8.el8_10.6 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	`0:3.6.14-10.el8_4.1 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	`0:4.13-3.el8_4.1 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	`0:3.6.14-10.el8_4.1 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	`0:4.13-3.el8_4.1 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	`0:3.6.16-5.el8_6.5 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	`0:4.13-3.el8_6.2 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On	`0:3.6.16-5.el8_6.5 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On	`0:4.13-3.el8_6.2 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	`0:3.6.16-7.el8_8.4 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	`0:4.13-4.el8_8.1 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	`0:3.6.16-7.el8_8.4 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	`0:4.13-4.el8_8.1 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 9	`0:3.8.10-4.el9_8 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 9	`0:3.8.10-4.el9_8 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	`0:3.8.3-4.el9_4.6 < *`	unaffected
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	`0:3.8.3-6.el9_6.4 < *`	unaffected
Red Hat	Red Hat OpenShift Container Platform 4.22	`4.22.9.8.202606230855-0 < *`	unaffected
Red Hat	Red Hat Discovery 2	`1782159791 < *`	unaffected
Red Hat	Red Hat Discovery 2	`1782166952 < *`	unaffected
Red Hat	Red Hat Hardened Images	`3.8.13-1.hum1 < *`	unaffected
Red Hat	Red Hat Update Infrastructure 5	`1781525684 < *`	unaffected
Red Hat	Red Hat Update Infrastructure 5	`1781525671 < *`	unaffected
Red Hat	Red Hat Update Infrastructure 5	`1781525693 < *`	unaffected
Red Hat	Red Hat Update Infrastructure 5	`1781525739 < *`	unaffected

Weaknesses

CWE-475: Undefined Behavior for Input to API

ADP Enrichment

CISA ADP Vulnrichment

SSVC:
Exploitation: none
- Automatable: yes
- Technical Impact: partial

gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability

Additional References

References

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.