high severity ยท published 2026-10-23
For some short IPv6 addresses the io_uring network filter sees a zero port and address while the kernel still connects to the real destination. A rule meant to block a destination can therefore be skipped.
CVE: CVE-2026-99042
Source: NVD
Fixlane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the Fixlane MCP server and call get_fix_prompt with incident id 520 and your operating system.