CVE-2026-101307

Name of the Vulnerable Software and Affected Versions RACK stack (affected versions not specified)

Description An issue exists where the RACK stack doubles a 16-bit allocation counter when the PCM sample array requires expansion. Repeated doublings can cause the counter to wrap to zero, leading to a near-zero-length allocation. Subsequently, existing samples are copied into this undersized buffer. A remote attacker with an established TCP connection can trigger this expansion by sending a sufficient number of ACKs, resulting in an out-of-bounds write of approximately 512 KB in the kernel heap, which may cause a kernel panic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.