CVE-2026-45536Medium· 4.0▾ SunlitA flaw was found in Netty, a network application framework. A local attacker could exploit a vulnerability in the `netty_unix_socket_recvFd` function when handling `SCM_RIGHTS` messages in `Epoll` or `KQueue DomainSocketChannel` with `Doma…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 22 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 7.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.1%
Last analysed / modified upstream
A flaw was found in Netty, a network application framework. A local attacker could exploit a vulnerability in the netty_unix_socket_recvFd function when handling SCM_RIGHTS messages in Epoll or KQueue DomainSocketChannel with DomainSocketReadMode.FILE_DESCRIPTORS enabled. Incorrect handling of file descriptors could lead to a resource leak, resulting in a Denial of Service (DoS) due to exhaustion of available file descriptors.
netty-transport-native-epoll: netty-transport-native-kqueue: Netty: Denial of Service due to file descriptor leak in SCM_RIGHTS message handling — rated Moderate by Red Hat. Released 2026-06-12, updated 2026-09-07.
Affected:
Fixed:
No fix planned:
Not affected:
Before applying the update, make sure all previously released errata relevant to your system have been applied. Also, back up your existing installation, including all applications, configuration files, databases and database settings. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2026:50085
Workarounds / mitigations:
DomainSocketReadMode.FILE_DESCRIPTORS is not enabled in applications utilizing Netty's Epoll or KQueue DomainSocketChannel. This feature is not enabled by default, and disabling it prevents the file descriptor leak that could lead to a Denial of Service.Affected packages:
io.netty:netty-transport-native-epoll >= 4.2.0.Final, <= 4.2.14.Finalio.netty:netty-transport-native-kqueue >= 4.2.0.Final, <= 4.2.14.Finalio.netty:netty-transport-native-kqueue <= 4.1.134.Finalio.netty:netty-transport-native-epoll <= 4.1.134.FinalPatched in:
io.netty:netty-transport-native-epoll 4.2.15.Finalio.netty:netty-transport-native-kqueue 4.2.15.Finalio.netty:netty-transport-native-kqueue 4.1.135.Finalio.netty:netty-transport-native-epoll 4.1.135.FinalConnected by shared product, vendor, weakness, or advisory.
CVE-2026-78679Medium· 6.5GitPython: GitPython: Arbitrary file read via TagReference.create() (CVE-2026-78679)
CVE-2026-78678Medium· 6.5gitpython: GitPython: Arbitrary file read via Repo.blame() (CVE-2026-78678)
CVE-2026-78675Medium· 5.5GitPython: GitPython: Local file content disclosure via malicious .gitmodules (CVE-2026-78675)
CVE-2026-67322High· 7.5GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clone_from()
CVE-2026-10051Medium· 5.3jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections (CVE-2026-10051)
CVE-2026-56816High· 7.5io.netty:netty-codec-http3: Netty: Denial of Service due to uncontrolled memory buffering in HTTP/3 (CVE-2026-56816)