Commits

commits@lists.kronosnet.org

1 participants
44600 discussions

[kronosnet/kronosnet] 0f6c99: CVE-2026-15812: access control list bypass via lin...
by Fabio Di Nitto 20 Jul '26

20 Jul '26

Branch: refs/heads/stable1-proposed Home: https://github.com/kronosnet/kronosnet Commit: 0f6c99e587b0e83e046ac84c4fedad1158349c0f https://github.com/kronosnet/kronosnet/commit/0f6c99e587b0e83e046ac84c4feda… Author: Fabio M. Di Nitto <fdinitto(a)redhat.com> Date: 2026-07-20 (Mon, 20 Jul 2026) Changed paths: M libknet/handle.c M libknet/tests/Makefile.am M libknet/tests/fun_acl_check.c A libknet/tests/sec_acl_link_id_spoofing.c M libknet/threads_rx.c Log Message: ----------- CVE-2026-15812: access control list bypass via link ID spoofing on unencrypted dynamic links Severity: LOW Exploitable only with unencrypted traffic (not supported for production). Validate that packets originate from the configured source address for the claimed link_id. Previously, link_id was trusted without verification, allowing attackers to probe link states or confuse failover logic. Implement secure-by-default model with proper static/dynamic link handling: - Enable use_access_lists=1 by default in knet_handle_new - Static links: always validate against auto-configured ACL - Dynamic links with use_access_lists=1 (default): require ACL or reject - Dynamic links with use_access_lists=0: skip validation (explicit opt-out) Add bounds check, source address verification, and centralized _check_rx_acl(). Update tests to reflect secure-by-default model. Signed-off-by: Fabio M. Di Nitto <fdinitto(a)redhat.com> Co-Authored-By: Claude Sonnet 4.5 <noreply(a)anthropic.com> Commit: ada3d6d62b90aa68b3a2ec10fb24eab6b300e1c6 https://github.com/kronosnet/kronosnet/commit/ada3d6d62b90aa68b3a2ec10fb24e… Author: Fabio M. Di Nitto <fdinitto(a)redhat.com> Date: 2026-07-20 (Mon, 20 Jul 2026) Changed paths: M libknet/tests/Makefile.am A libknet/tests/sec_frag_sequence.c M libknet/threads_rx.c Log Message: ----------- CVE-2026-15813: memory corruption and out-of-bounds access via malformed network packet defragmentation Severity: MEDIUM Validate fragment sequence numbers before accessing defragmentation buffers. Previous code used unchecked sequence numbers as array indices, allowing heap buffer overflow. Exploitable only with unencrypted traffic (not supported for production). CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer Signed-off-by: Fabio M. Di Nitto <fdinitto(a)redhat.com> Co-Authored-By: Claude Sonnet 4.5 <noreply(a)anthropic.com> Compare: https://github.com/kronosnet/kronosnet/compare/8ab8cda6cdd3...ada3d6d62b90 To unsubscribe from these emails, change your notification settings at https://github.com/kronosnet/kronosnet/settings/notifications

1 0

[jenkins] kronosnet PR-499 (build 1) Jenkins exception
by jenkins＠kronosnet.org 20 Jul '26

20 Jul '26

Run reason: Pull request #499 opened Total runtime: 10 min Split logs: https://ci.kronosnet.org/job/kronosnet/job/kronosnet-pipeline/job/PR-499/1/… Full log: https://ci.kronosnet.org/job/kronosnet/job/kronosnet-pipeline/job/PR-499/1/… Please report the following errors to your friendly local Jenkins admin (though they have probably already seen them and are already panicking). Exception caught on centos-9-s390x during voting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on centos-9-x86-64 during voting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on centos-10-s390x during voting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on centos-10-x86-64 during voting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on debian-12-x86-64 during voting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on debian-13-x86-64 during voting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on debian-testing-x86-64 during voting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on fedora-43-power9-ppc64le during voting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on fedora-43-s390x during voting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on fedora-43-x86-64 during voting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on freebsd-14-x86-64 during voting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on freebsd-15-x86-64 during voting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-8-s390x during voting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-8-x86-64 during voting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-9-s390x during voting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-9-x86-64 during voting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-10-s390x during voting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-10-x86-64 during voting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on ubuntu-22-04-lts-x86-64 during voting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on ubuntu-24-04-lts-x86-64 during voting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on ubuntu-25-10-x86-64 during voting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on alpine-x86-64 during nonvoting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on debian-experimental-x86-64 during nonvoting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on debian-unstable-x86-64 during nonvoting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on fedora-rawhide-power9-ppc64le during nonvoting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on fedora-rawhide-s390x during nonvoting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on fedora-rawhide-x86-64 during nonvoting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on freebsd-devel-x86-64 during nonvoting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on ubuntu-devel-x86-64 during nonvoting_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on alpine-x86-64 during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on alpine-x86-64 during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on centos-9-s390x during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on centos-9-s390x during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on centos-9-x86-64 during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on centos-9-x86-64 during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on centos-10-s390x during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on centos-10-s390x during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on centos-10-x86-64 during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on centos-10-x86-64 during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on debian-12-x86-64 during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on debian-12-x86-64 during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on debian-13-x86-64 during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on debian-13-x86-64 during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on debian-experimental-x86-64 during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on debian-experimental-x86-64 during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on debian-testing-x86-64 during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on debian-testing-x86-64 during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on debian-unstable-x86-64 during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on debian-unstable-x86-64 during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on fedora-43-power9-ppc64le during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on fedora-43-power9-ppc64le during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on fedora-43-s390x during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on fedora-43-s390x during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on fedora-43-x86-64 during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on fedora-43-x86-64 during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on fedora-rawhide-power9-ppc64le during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on fedora-rawhide-power9-ppc64le during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on fedora-rawhide-s390x during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on fedora-rawhide-s390x during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on fedora-rawhide-x86-64 during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on fedora-rawhide-x86-64 during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on freebsd-14-x86-64 during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on freebsd-14-x86-64 during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on freebsd-15-x86-64 during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on freebsd-15-x86-64 during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on freebsd-devel-x86-64 during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on freebsd-devel-x86-64 during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on openindiana-x86-64 during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on openindiana-x86-64 during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-8-power9-ppc64le during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-8-power9-ppc64le during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-8-s390x during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-8-s390x during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-8-x86-64 during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-8-x86-64 during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-9-s390x during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-9-s390x during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-9-x86-64 during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-9-x86-64 during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-10-power9-ppc64le during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-10-power9-ppc64le during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-10-s390x during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-10-s390x during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-10-x86-64 during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-10-x86-64 during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on ubuntu-22-04-lts-x86-64 during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on ubuntu-22-04-lts-x86-64 during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on ubuntu-24-04-lts-x86-64 during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on ubuntu-24-04-lts-x86-64 during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on ubuntu-25-10-x86-64 during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on ubuntu-25-10-x86-64 during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on ubuntu-devel-x86-64 during nonvoting-clang: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on ubuntu-devel-x86-64 during nonvoting-clang_debug: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on centos-9-s390x during buildrpms: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on centos-9-x86-64 during buildrpms: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on centos-10-s390x during buildrpms: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on centos-10-x86-64 during buildrpms: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on fedora-43-power9-ppc64le during buildrpms: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on fedora-43-s390x during buildrpms: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on fedora-43-x86-64 during buildrpms: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on fedora-rawhide-power9-ppc64le during buildrpms: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on fedora-rawhide-s390x during buildrpms: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on fedora-rawhide-x86-64 during buildrpms: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-8-power9-ppc64le during buildrpms: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-8-s390x during buildrpms: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-8-x86-64 during buildrpms: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-9-s390x during buildrpms: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-9-x86-64 during buildrpms: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-10-power9-ppc64le during buildrpms: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-10-s390x during buildrpms: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-10-x86-64 during buildrpms: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-8-coverity-x86-64 during covscan: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-9-coverity-x86-64 during covscan: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException: Exception caught on rhel-10-coverity-x86-64 during covscan: org.jenkinsci.plugins.workflow.steps.FlowInterruptedException:

1 0

[kronosnet/kronosnet] 975fe7: CVE-2026-15812: access control list bypass via lin...
by Fabio Di Nitto 20 Jul '26

20 Jul '26

Branch: refs/heads/security-fixes-cve-only Home: https://github.com/kronosnet/kronosnet Commit: 975fe7c89cbdfbeb8bb87769a070a020e3461d14 https://github.com/kronosnet/kronosnet/commit/975fe7c89cbdfbeb8bb87769a070a… Author: Fabio M. Di Nitto <fdinitto(a)redhat.com> Date: 2026-07-20 (Mon, 20 Jul 2026) Changed paths: M libknet/handle.c M libknet/onwire_v1.c M libknet/tests/Makefile.am M libknet/tests/fun_acl_check.c A libknet/tests/sec_acl_link_id_spoofing.c M libknet/threads_rx.c Log Message: ----------- CVE-2026-15812: access control list bypass via link ID spoofing on unencrypted dynamic links Severity: LOW Exploitable only with unencrypted traffic (not supported for production). Validate that packets originate from the configured source address for the claimed link_id. Previously, link_id was trusted without verification, allowing attackers to probe link states or confuse failover logic. Implement secure-by-default model with proper static/dynamic link handling: - Enable use_access_lists=1 by default in knet_handle_new - Static links: always validate against auto-configured ACL - Dynamic links with use_access_lists=1 (default): require ACL or reject - Dynamic links with use_access_lists=0: skip validation (explicit opt-out) Add bounds check, source address verification, and centralized _check_rx_acl(). Update tests to reflect secure-by-default model. Signed-off-by: Fabio M. Di Nitto <fdinitto(a)redhat.com> Co-Authored-By: Claude Sonnet 4.5 <noreply(a)anthropic.com> Commit: 815b66c2343b59ddee88ed9a9a801e5412cae53f https://github.com/kronosnet/kronosnet/commit/815b66c2343b59ddee88ed9a9a801… Author: Fabio M. Di Nitto <fdinitto(a)redhat.com> Date: 2026-07-20 (Mon, 20 Jul 2026) Changed paths: M libknet/tests/Makefile.am A libknet/tests/sec_frag_sequence.c M libknet/threads_rx.c Log Message: ----------- CVE-2026-15813: memory corruption and out-of-bounds access via malformed network packet defragmentation Severity: MEDIUM Validate fragment sequence numbers before accessing defragmentation buffers. Previous code used unchecked sequence numbers as array indices, allowing heap buffer overflow. Exploitable only with unencrypted traffic (not supported for production). CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer Signed-off-by: Fabio M. Di Nitto <fdinitto(a)redhat.com> Co-Authored-By: Claude Sonnet 4.5 <noreply(a)anthropic.com> Compare: https://github.com/kronosnet/kronosnet/compare/e35b8e253f94...815b66c2343b To unsubscribe from these emails, change your notification settings at https://github.com/kronosnet/kronosnet/settings/notifications

1 0

[kronosnet/kronosnet] 6bbc85: CVE-2026-15811: encryption key exposure in memory ...
by Fabio Di Nitto 20 Jul '26

20 Jul '26

Branch: refs/heads/stable1-proposed Home: https://github.com/kronosnet/kronosnet Commit: 6bbc8572f7edeb53abd259647b97d74945f68e75 https://github.com/kronosnet/kronosnet/commit/6bbc8572f7edeb53abd259647b97d… Author: Fabio M. Di Nitto <fdinitto(a)redhat.com> Date: 2026-07-20 (Mon, 20 Jul 2026) Changed paths: M configure.ac M libknet/crypto_nss.c M libknet/crypto_openssl.c Log Message: ----------- CVE-2026-15811: encryption key exposure in memory after cryptographic configuration changes Severity: LOW Wipe cryptographic keys before freeing to prevent exposure through memory disclosure vulnerabilities using explicit_bzero(). Wipe private_key buffers in openssl/gcrypt backends and instance structures in all backends. The explicit_bzero() function is now required by kronosnet. All modern Linux distributions (glibc >= 2.25, musl >= 1.1.20) and BSDs provide this function. Signed-off-by: Fabio M. Di Nitto <fdinitto(a)redhat.com> Co-Authored-By: Claude Sonnet 4.5 <noreply(a)anthropic.com> Commit: 23def537856062ceca2232c45d848a5b4b80f044 https://github.com/kronosnet/kronosnet/commit/23def537856062ceca2232c45d848… Author: Fabio M. Di Nitto <fdinitto(a)redhat.com> Date: 2026-07-20 (Mon, 20 Jul 2026) Changed paths: M libknet/handle.c M libknet/tests/Makefile.am M libknet/tests/fun_acl_check.c A libknet/tests/sec_acl_link_id_spoofing.c M libknet/threads_rx.c Log Message: ----------- CVE-2026-15812: access control list bypass via link ID spoofing on unencrypted dynamic links Severity: LOW Exploitable only with unencrypted traffic (not supported for production). Validate that packets originate from the configured source address for the claimed link_id. Previously, link_id was trusted without verification, allowing attackers to probe link states or confuse failover logic. Implement secure-by-default model with proper static/dynamic link handling: - Enable use_access_lists=1 by default in knet_handle_new - Static links: always validate against auto-configured ACL - Dynamic links with use_access_lists=1 (default): require ACL or reject - Dynamic links with use_access_lists=0: skip validation (explicit opt-out) Add bounds check, source address verification, and centralized _check_rx_acl(). Update tests to reflect secure-by-default model. Signed-off-by: Fabio M. Di Nitto <fdinitto(a)redhat.com> Co-Authored-By: Claude Sonnet 4.5 <noreply(a)anthropic.com> Commit: 8ab8cda6cdd3820b6e60a557eb4074b4e76038cc https://github.com/kronosnet/kronosnet/commit/8ab8cda6cdd3820b6e60a557eb407… Author: Fabio M. Di Nitto <fdinitto(a)redhat.com> Date: 2026-07-20 (Mon, 20 Jul 2026) Changed paths: M libknet/tests/Makefile.am A libknet/tests/sec_frag_sequence.c M libknet/threads_rx.c Log Message: ----------- CVE-2026-15813: memory corruption and out-of-bounds access via malformed network packet defragmentation Severity: MEDIUM Validate fragment sequence numbers before accessing defragmentation buffers. Previous code used unchecked sequence numbers as array indices, allowing heap buffer overflow. Exploitable only with unencrypted traffic (not supported for production). CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer Signed-off-by: Fabio M. Di Nitto <fdinitto(a)redhat.com> Co-Authored-By: Claude Sonnet 4.5 <noreply(a)anthropic.com> Compare: https://github.com/kronosnet/kronosnet/compare/72571ed61031...8ab8cda6cdd3 To unsubscribe from these emails, change your notification settings at https://github.com/kronosnet/kronosnet/settings/notifications

1 0

[kronosnet/kronosnet] 0f6636: CVE-2026-15811: encryption key exposure in memory ...
by Fabio Di Nitto 20 Jul '26

20 Jul '26

Branch: refs/heads/security-fixes-cve-only Home: https://github.com/kronosnet/kronosnet Commit: 0f66366cbe3fc6d7742571187442ba5cda627d1d https://github.com/kronosnet/kronosnet/commit/0f66366cbe3fc6d7742571187442b… Author: Fabio M. Di Nitto <fdinitto(a)redhat.com> Date: 2026-07-20 (Mon, 20 Jul 2026) Changed paths: M configure.ac M libknet/crypto_gcrypt.c M libknet/crypto_nss.c M libknet/crypto_openssl.c Log Message: ----------- CVE-2026-15811: encryption key exposure in memory after cryptographic configuration changes Severity: LOW Wipe cryptographic keys before freeing to prevent exposure through memory disclosure vulnerabilities using explicit_bzero(). Wipe private_key buffers in openssl/gcrypt backends and instance structures in all backends. The explicit_bzero() function is now required by kronosnet. All modern Linux distributions (glibc >= 2.25, musl >= 1.1.20) and BSDs provide this function. Signed-off-by: Fabio M. Di Nitto <fdinitto(a)redhat.com> Co-Authored-By: Claude Sonnet 4.5 <noreply(a)anthropic.com> Commit: eae54a89e1840153a32142fa21cc2f2645b42956 https://github.com/kronosnet/kronosnet/commit/eae54a89e1840153a32142fa21cc2… Author: Fabio M. Di Nitto <fdinitto(a)redhat.com> Date: 2026-07-20 (Mon, 20 Jul 2026) Changed paths: M libknet/handle.c M libknet/onwire_v1.c M libknet/tests/Makefile.am M libknet/tests/fun_acl_check.c A libknet/tests/sec_acl_link_id_spoofing.c M libknet/threads_rx.c Log Message: ----------- CVE-2026-15812: access control list bypass via link ID spoofing on unencrypted dynamic links Severity: LOW Exploitable only with unencrypted traffic (not supported for production). Validate that packets originate from the configured source address for the claimed link_id. Previously, link_id was trusted without verification, allowing attackers to probe link states or confuse failover logic. Implement secure-by-default model with proper static/dynamic link handling: - Enable use_access_lists=1 by default in knet_handle_new - Static links: always validate against auto-configured ACL - Dynamic links with use_access_lists=1 (default): require ACL or reject - Dynamic links with use_access_lists=0: skip validation (explicit opt-out) Add bounds check, source address verification, and centralized _check_rx_acl(). Update tests to reflect secure-by-default model. Signed-off-by: Fabio M. Di Nitto <fdinitto(a)redhat.com> Co-Authored-By: Claude Sonnet 4.5 <noreply(a)anthropic.com> Commit: e35b8e253f94330188846a6915fc537ff4ed549d https://github.com/kronosnet/kronosnet/commit/e35b8e253f94330188846a6915fc5… Author: Fabio M. Di Nitto <fdinitto(a)redhat.com> Date: 2026-07-20 (Mon, 20 Jul 2026) Changed paths: M libknet/tests/Makefile.am A libknet/tests/sec_frag_sequence.c M libknet/threads_rx.c Log Message: ----------- CVE-2026-15813: memory corruption and out-of-bounds access via malformed network packet defragmentation Severity: MEDIUM Validate fragment sequence numbers before accessing defragmentation buffers. Previous code used unchecked sequence numbers as array indices, allowing heap buffer overflow. Exploitable only with unencrypted traffic (not supported for production). CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer Signed-off-by: Fabio M. Di Nitto <fdinitto(a)redhat.com> Co-Authored-By: Claude Sonnet 4.5 <noreply(a)anthropic.com> Compare: https://github.com/kronosnet/kronosnet/compare/0f66366cbe3f%5E...e35b8e253f… To unsubscribe from these emails, change your notification settings at https://github.com/kronosnet/kronosnet/settings/notifications

1 0

[jenkins] corosync PR-822 (build 21) success
by jenkins＠kronosnet.org 20 Jul '26

20 Jul '26

Run reason: Pull request #822 updated Total runtime: 2 days 12 hr Split logs: https://ci.kronosnet.org/job/corosync/job/corosync-pipeline/job/PR-822/21/a… Full log: https://ci.kronosnet.org/job/corosync/job/corosync-pipeline/job/PR-822/21/c… Full Coverity results: http://ci.kronosnet.org/coverity/corosync/rhel-10-coverity-x86-64/pr822/kro… http://ci.kronosnet.org/coverity/corosync/rhel-8-coverity-x86-64/pr822/kron… http://ci.kronosnet.org/coverity/corosync/rhel-9-coverity-x86-64/pr822/kron… http://ci.kronosnet.org/coverity/corosync/rhel-10-coverity-x86-64/pr822/kro… http://ci.kronosnet.org/coverity/corosync/rhel-8-coverity-x86-64/pr822/kron… http://ci.kronosnet.org/coverity/corosync/rhel-9-coverity-x86-64/pr822/kron… Duplicate job killed: corosync/corosync-pipeline/PR-822 (20)

1 0

[jenkins] corosync PR-822 (build 20) aborted
by jenkins＠kronosnet.org 20 Jul '26

20 Jul '26

Run reason: Pull request #822 updated Total runtime: 2 days 11 hr Full log: https://ci.kronosnet.org/job/corosync/job/corosync-pipeline/job/PR-822/20/c…

1 0

[jenkins] kernel-ark ark-latest (build 88) completed with 1 failures
by jenkins＠kronosnet.org 19 Jul '26

19 Jul '26

1/5 Stage failed: - brawl_quick (nodes: 3) Run reason: Branch indexing Total runtime: 10 hr Full log: https://ci.kronosnet.org/job/kernel-ark/job/kernel-ark-pipeline/job/ark-lat… Repository: https://ci.kronosnet.org/builds/kernel/rhel-9-kbuild/origin/ark-latest/88/

1 0

[jenkins] ha-functional-testing-weekly Smoke tests only (build 311) completed with 36 failures
by jenkins＠kronosnet.org 19 Jul '26

19 Jul '26

36/138 Stages failed: - aws rhel10 zstream:no upstream:main tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… - pacemaker,resource,IPv4,recovery (nodes: 2) - aws rhel10 zstream:yes upstream:main tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… - pacemaker,resource,IPv4,recovery (nodes: 3) - aws rhel10 zstream:yes upstream:next-stable tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… - pacemaker,resource,IPv4,recovery (nodes: 2) - aws rhel10 zstream:yes upstream:none tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… - pacemaker,resource,IPv4,recovery (nodes: 2) - aws rhel8 zstream:no upstream:stable tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… - pacemaker,resource,IPv4,recovery (nodes: 3) - aws rhel8 zstream:yes upstream:none tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… - pacemaker,resource,IPv4,recovery (nodes: 4) - aws rhel9 zstream:no upstream:next-stable tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… - pacemaker,resource,IPv4,recovery (nodes: 2) - aws rhel9 zstream:no upstream:none tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… - pacemaker,resource,IPv4,recovery (nodes: 2) - pacemaker,resource,IPv4,recovery (nodes: 4) - aws rhel9 zstream:yes upstream:none tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… - pacemaker,resource,IPv4,recovery (nodes: 2) - pacemaker,resource,IPv4,recovery (nodes: 4) - azure rhel10 zstream:no upstream:main tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… failed in create_cluster - azure rhel10 zstream:no upstream:next-stable tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… failed in create_cluster - azure rhel10 zstream:no upstream:none tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… failed in create_cluster - azure rhel10 zstream:yes upstream:main tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… failed in create_cluster - azure rhel10 zstream:yes upstream:next-stable tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… failed in create_cluster - azure rhel10 zstream:yes upstream:none tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… failed in create_cluster - azure rhel8 zstream:no upstream:none tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… failed in create_cluster - azure rhel8 zstream:no upstream:stable tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… failed in create_cluster - azure rhel8 zstream:yes upstream:none tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… failed in create_cluster - azure rhel8 zstream:yes upstream:stable tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… failed in create_cluster - azure rhel9 zstream:no upstream:main tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… failed in create_cluster - azure rhel9 zstream:no upstream:next-stable tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… failed in create_cluster - azure rhel9 zstream:no upstream:none tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… failed in create_cluster - azure rhel9 zstream:no upstream:stable tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… failed in create_cluster - azure rhel9 zstream:yes upstream:main tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… failed in create_cluster - azure rhel9 zstream:yes upstream:next-stable tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… failed in create_cluster - azure rhel9 zstream:yes upstream:none tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… failed in create_cluster - azure rhel9 zstream:yes upstream:stable tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… failed in create_cluster - gcp rhel10 zstream:no upstream:main tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… - pacemaker,resource,IPv4,recovery (nodes: 3) - gcp rhel10 zstream:no upstream:next-stable tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… - pacemaker,resource,IPv4,recovery (nodes: 2) - pacemaker,resource,IPv4,recovery (nodes: 3) - gcp rhel10 zstream:no upstream:none tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… - pacemaker,resource,IPv4,recovery (nodes: 2) - gcp rhel10 zstream:yes upstream:next-stable tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… - pacemaker,resource,IPv4,recovery (nodes: 2) - gcp rhel10 zstream:yes upstream:none tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… - pacemaker,resource,IPv4,recovery (nodes: 2) - pacemaker,resource,IPv4,recovery (nodes: 4) - gcp rhel9 zstream:no upstream:main tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… - pacemaker,resource,IPv4,recovery (nodes: 2) - pacemaker,resource,IPv4,recovery (nodes: 3) - pacemaker,resource,IPv4,recovery (nodes: 4) - gcp rhel9 zstream:no upstream:stable tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… - pacemaker,resource,IPv4,recovery (nodes: 2) - gcp rhel9 zstream:yes upstream:none tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… - pacemaker,resource,IPv4,recovery (nodes: 2) - osp rhel9 zstream:no upstream:next-stable tests:smoke: https://haci.fast.eng.rdu2.dc.redhat.com/job/global/job/ha-functional-testi… failed in Initial delete_cluster Run reason: Started by upstream project "global/all-weekly" build number 54 Total runtime: 14 hr Full log: https://ci.kronosnet.org/job/global/job/ha-functional-testing-weekly/311/co…

1 0

[jenkins] booth main (build 219) completed with state: failure
by jenkins＠kronosnet.org 19 Jul '26

19 Jul '26

1 0

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

Commits