GCVE-110-NCSC-2026-452

Advisory PublishedCVSS 7.0/10

Vulnetix · Advisory published October 22, 2026

A vulnerability in the RACK TCP stack allows remote attackers to cause an out-of-bounds write in the kernel heap by triggering the PCM sample array allocation counter to wrap, potentially resulting in a kernel panic.

Download JSON Open in Console

Weaknesses (CWE)

CWE-122Heap-based Buffer OverflowCWE-367Time-of-check Time-of-use (TOCTOU) Race ConditionCWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')CWE-126Buffer Over-read

Risk Scores

CVSS 3.1

7.0/10

High · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
FreeBSD	vers:unknown/*	—	—

Aliases

CVE-2026-101307 CVE-2026-101308 CVE-2026-101309 CVE-2026-101310 CVE-2026-101311

References

advisory

Browse GCVE Records

854 records in the GCVE database · Updated October 30, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON