Skip to content

CVE-2026-80225 on Cyberus Linux 26.05

Aliases: CVE-2026-80225

Packages: unbound

Status: In Progress

Advisory Information

In NLnetLabs Unbound up to and including 1.26.0, a degradation of service vulnerability is present in the TCP/DoT reading procedure where there is no limit on consecutive reads. A malicious actor that can stream and sustain a rate of distinct uncached names over the TCP/DoT connection, monopolizes a single worker's entire event loop for as long as its writes stay ahead of the drain.

Updates

2026-09-22 11:14 CEST

Metadata changes:

  • Status for package unbound: “In Progress”

2026-09-22 11:07 CEST

Metadata changes:

  • Status for package unbound: “New”