Netty Vulnerability Exposes Ubuntu to DNS Cache Poisoning Attacks

A vulnerability in Netty, an event-driven asynchronous network application framework, has been discovered that allows attackers to exploit improper validation of NS records, potentially leading to DNS cache poisoning attacks. This issue affects Ubuntu 24.04 LTS systems using the libnetty-java package version 1:4.1.48-9ubuntu0.2+esm2. Users are advised to update their systems to mitigate the risk. The vulnerability is cataloged under CVE-2026-8742. Both Linuxsecurity and Ubuntu have issued advisories on this matter, emphasizing the importance of applying the necessary patches. The vulnerability poses a significant risk as it could allow attackers to manipulate DNS responses, impacting the integrity of network communications. Current status indicates that a patch is available, and users should prioritize updates to their systems.

Key Points: • Netty vulnerability allows DNS cache poisoning attacks on Ubuntu 24.04 LTS. • Affected package version is libnetty-java 1:4.1.48-9ubuntu0.2+esm2. • Urgent patching is recommended to mitigate the risk.