Back Linuxsecurity

Fedora 42 Update on Key Dotnet 10.0 Runtime Vulnerability CVE-2026

Linuxsecurity •LinuxSecurity Advisories • May 10, 2026

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything. Update Information : Update to .NET SDK 10.0.107 and Runtime 10.0.7 Fixes: CVE-2026-40372 Release Notes: SDK: notes/10.0/10.0.7/10.0.107.md Runtime: notes/10.0/10.0.7/10.0.7.md

.NET is a fast, lightweight and modular platform for creating

cross platform applications that work on Linux, macOS and Windows.

It particularly focuses on creating console applications, web

applications and micro-services.

.NET contains a runtime conforming to .NET Standards a set of

framework libraries, an SDK containing compilers and a 'dotnet'

application to drive everything.

Update to .NET SDK 10.0.107 and Runtime 10.0.7 Fixes: CVE-2026-40372 Release Notes: SDK: notes/10.0/10.0.7/10.0.107.md Runtime: notes/10.0/10.0.7/10.0.7.md

* Fri May 1 2026 Omair Majid - 10.0.107-1 - Update to .NET SDK 10.0.107 and Runtime 10.0.7

Fedora Update Notification FEDORA-2026-be6ea464d0 2026-05-10 03:21:58.076191+00:00 Name : dotnet10.0 Product : Fedora 42 Version : 10.0.107 Release : 1.fc42 URL : Summary : .NET 10.0 Runtime and SDK Description : .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework libraries, an SDK containing compilers and a 'dotnet' application to drive everything.

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-be6ea464d0' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Runtime Fix for .NET SDK Addresses CVE-2026-40372 .NET SDK 10.0.107 and Runtime 10.0.7 updates were released to address CVE-2026-40372, a significant vulnerability affecting Fedora 42 and 43. The vulnerability, published on April 21, 2026, could potentially allow unauthorized access or execution of malicious code. Users of Fedora 42 and 43 are urged to upgrade to the latest versions to mitigate risks associated with this CVE. The updates were made available on May 10 and May 11, respectively. The updates can be installed using the 'dnf' package manager. This situation highlights the importance of timely patching in maintaining system security. The vulnerability affects cross-platform applications developed using .NET, which is widely used in various environments. 11 sources 72

Extracted Entities

CVEs (1)

CVE-2026-40372

Platforms (3)

Linux MacOS Windows