AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← CVE index
Δ / VULNERABILITY RECORD

CVE-2026-42009.

Source-reported disclosure and enrichment record.

SEVERITY / CVSSHIGH / 7.5CVSS 3.1 · secalert@redhat.com
EXPLOITATION STATUSNot listed in the cached KEV catalogThis does not establish absence of exploitation.
RECORD STATUSModifiedModified Oct 08, 2026

Disclosure summary

A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security (DTLS) packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This could lead to unstable packet ordering or undefined behavior, resulting in a denial of service.

Source-reported weakness categories

CWE-475

Source-specific records & product guidance

Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.

NIST National Vulnerability Database · NVD-CVE-2026-42009

Open original source · Updated Oct 08, 2026

Only CPE matches marked vulnerable=true are indexed. AND/OR platform conditions must be checked in the original NVD record.

VendorProduct / associationVersion / bounds
gnugnutls-
redhathardened_images-
redhatopenshift_container_platform4.0
redhatenterprise_linux6.0
redhatenterprise_linux7.0
redhatenterprise_linux8.0
redhatenterprise_linux8.0
redhatenterprise_linux_for_els8.10
redhatenterprise_linux_for_els8.10
redhatenterprise_linux_for_ibm_z_systems8.0_s390x
redhatenterprise_linux_for_ibm_z_systems_els8.10
redhatenterprise_linux_for_power_little_endian8.0_ppc64le
redhatenterprise_linux_for_power_little_endian_els8.10
redhatenterprise_linux9.0
redhatenterprise_linux9.0
redhatenterprise_linux9.8
redhatenterprise_linux_for_els9.8
redhatenterprise_linux_for_els9.8
redhatenterprise_linux_for_eus9.8
redhatenterprise_linux_for_eus9.8
redhatenterprise_linux_for_ibm_z_systems9.0_s390x
redhatenterprise_linux_for_ibm_z_systems_els9.8
redhatenterprise_linux_for_ibm_z_systems_eus9.8
redhatenterprise_linux_for_power_little_endian9.0_ppc64le
redhatenterprise_linux_for_power_little_endian_els9.8
redhatenterprise_linux_for_power_little_endian_eus9.8
redhatenterprise_linux_for_update_services_for_sap_solutions9.8
redhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions9.8
redhatenterprise_linux10.0
redhatenterprise_linux10.0
redhatenterprise_linux10.2
redhatenterprise_linux10.2
redhatenterprise_linux_for_els10.2
redhatenterprise_linux_for_els10.2
redhatenterprise_linux_for_eus10.2
redhatenterprise_linux_for_eus10.2
redhatenterprise_linux_for_ibm_z_systems10.2
redhatenterprise_linux_for_ibm_z_systems_els10.2
redhatenterprise_linux_for_ibm_z_systems_eus10.2
redhatenterprise_linux_for_power_little_endian10.0
redhatenterprise_linux_for_power_little_endian10.2
redhatenterprise_linux_for_power_little_endian_els10.2
redhatenterprise_linux_for_power_little_endian_eus10.2

Original records & references

PUBLISHED 2026-05-18T09:16:32-04:00
MODIFIED 2026-10-08T17:18:00-04:00
INGESTED 2026-10-10T20:50:35-04:00