Back Linuxsecurity

Fedora 43 ntpd-rs Critical Denial Of Service Fix CVE-2026

Linuxsecurity •LinuxSecurity Advisories • March 31, 2026

Full-featured implementation of NTP with NTS support. Update Information : Update to version 1.7.1. Includes the fix for CVE-2026-26076: rs/security/advisories/GHSA-c7j7-rmvr-fjmv Release notes:

Full-featured implementation of NTP with NTS support.

Update to version 1.7.1. Includes the fix for CVE-2026-26076: rs/security/advisories/GHSA-c7j7-rmvr-fjmv Release notes:

* Sun Mar 22 2026 Fabio Valentini - 1.7.1-1 - Update to version 1.7.1; Fixes RHBZ#2435477

[ 1 ] Bug #2439602 - CVE-2026-26076 ntpd-rs: ntpd-rs: Denial of Service via malformed NTS packets requesting excessive cookies [fedora-43]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-cbe2315bad' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical DoS Vulnerability in Fedora NTP Service Addressed A critical Denial of Service (DoS) vulnerability, CVE-2026-26076, affecting the ntpd-rs service in Fedora 42 and 43 has been identified and patched. This vulnerability allows attackers to exploit malformed NTS packets to request excessive cookies, potentially leading to service disruptions. The vulnerability was published on February 12, 2026, and affects users of Fedora 42 and 43 who utilize the NTP service. The update to version 1.7.1 includes the necessary fixes and is available for installation via the 'dnf' package manager. Users are advised to upgrade their systems to mitigate potential attacks. The vulnerability's exploitation could impact a wide range of systems relying on accurate timekeeping. The patch was released on March 22, 2026, and is critical for maintaining service integrity. 2 sources 71

Extracted Entities

Fedora 43 ntpd-rs Critical Denial Of Service Fix CVE-2026

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)