Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability DatabaseCVE-2026-91150
CVE-2026-91150:
Rocky Linux vulnerability analysis and mitigation
A flaw was found in Cockpit. This vulnerability allows a remote attacker, without prior authentication, to send specially crafted fragmented WebSocket messages. These messages accumulate without a total-size limit, leading to unbounded memory exhaustion and a denial of service in the cockpit-ws service.
Linux Distribution fix status
Fix availability across major Linux distributions and their releases.
bionic (esm-apps)
cockpit
devel
cockpit
focal (esm-apps)
cockpit
jammy
cockpit
jammy (esm-apps)
cockpit
noble
cockpit
noble (esm-apps)
cockpit
resolute
cockpit
Source: NVD
