{"id":"DHI-5qos-62xl-deqq-pphf","summary":"Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able…","details":"Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time, handlePacket drops every packet other than the open confirmation/failure, without blocking and without tearing down the connection.","modified":"2026-11-10T22:15:02.870302337Z","published":"2026-11-10T22:09:09Z","upstream":["CVE-2026-78662"],"references":[{"type":"ADVISORY","url":"https://scout.docker.com/v/DHI-5qos-62xl-deqq-pphf"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78662"},{"type":"ADVISORY","url":"https://pkg.go.dev/vuln/GO-2026-6354"},{"type":"ADVISORY","url":"https://groups.google.com/g/golang-announce/c/1y3fb2np35U"},{"type":"ADVISORY","url":"https://go.dev/issue/81316"},{"type":"FIX","url":"https://go.dev/cl/826504"},{"type":"ADVISORY","url":"https://alas.aws.amazon.com/AL2/ALAS-2026-3969.html"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78662"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56855"},{"type":"ADVISORY","url":"https://alas.aws.amazon.com/AL2/ALAS-2026-4018.html"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78663"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78659"},{"type":"ADVISORY","url":"https://alas.aws.amazon.com/AL2023/ALAS-2026-3129.html"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88046"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88044"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88018"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88017"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88016"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88015"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88014"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-88013"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-79783"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-79782"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-79781"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-79780"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-79779"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-79778"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-79777"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-79776"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-79775"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-71313"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59732"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-56854"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46603"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42505"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-39822"},{"type":"ADVISORY","url":"https://alas.aws.amazon.com/AL2023/ALAS-2026-3140.html"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-75593"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61712"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61711"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-47262"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-17106"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15793"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15792"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15791"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-15789"},{"type":"ADVISORY","url":"https://alas.aws.amazon.com/AL2023/ALAS-2026-3160.html"},{"type":"ADVISORY","url":"https://alas.aws.amazon.com/AL2023/ALAS-2026-3266.html"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-94440"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-93320"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-92543"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-92542"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-81870"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-78667"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61801"},{"type":"ADVISORY","url":"https://alas.aws.amazon.com/AL2023/ALAS-2026-3273.html"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-95837"},{"type":"ADVISORY","url":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53493"},{"type":"ADVISORY","url":"https://alas.aws.amazon.com/AL2023/ALAS-2026-3274.html"},{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2026-78662"},{"type":"ADVISORY","url":"https://ubuntu.com/security/CVE-2026-78662"},{"type":"ADVISORY","url":"http://people.ubuntu.com/~ubuntu-security/cve/CVE-2026-78662"}],"affected":[{"package":{"name":"tailscale-dev","ecosystem":"Docker Hardened Images:Alpine:3.23","purl":"pkg:apk/dhi/tailscale-dev"},"versions":["1.100.0-r0","1.100.0-r1","1.100.0-r2","1.100.0-r3","1.100.0-r4","1.100.0-r5","1.102.0-r0","1.102.0-r1","1.102.2-r0","1.102.2-r1","1.102.3-r0","1.102.3-r1","1.102.3-r2","1.102.3-r3","1.102.3-r4","1.102.4-r0","1.102.5-r0","1.104.0-r0","1.104.1-r0","1.104.1-r1","1.104.1-r2","1.104.2-r0","1.104.4-r0","1.104.4-r1","1.104.5-r0","1.104.5-r1","1.98.1-r0","1.98.2-r0","1.98.2-r1","1.98.2-r2","1.98.3-r0","1.98.3-r1","1.98.3-r2","1.98.4-r0","1.98.5-r0","1.98.5-r1"],"database_specific":{"owner_kind":"HSP","source":"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-5qos-62xl-deqq-pphf.json"}},{"package":{"name":"tailscale-fips-dev","ecosystem":"Docker Hardened Images:Alpine:3.23","purl":"pkg:apk/dhi/tailscale-fips-dev"},"versions":["1.100.0-r0","1.100.0-r1","1.100.0-r2","1.100.0-r3","1.100.0-r4","1.100.0-r5","1.102.0-r0","1.102.0-r1","1.102.2-r0","1.102.2-r1","1.102.3-r0","1.102.3-r1","1.102.3-r2","1.102.3-r3","1.102.3-r4","1.102.4-r0","1.102.5-r0","1.104.0-r0","1.104.1-r0","1.104.1-r1","1.104.1-r2","1.104.2-r0","1.104.4-r0","1.104.4-r1","1.104.5-r0","1.104.5-r1","1.98.1-r0","1.98.2-r0","1.98.2-r1","1.98.2-r2","1.98.3-r0","1.98.3-r1","1.98.3-r2","1.98.4-r0","1.98.5-r0","1.98.5-r1"],"database_specific":{"owner_kind":"HSP","source":"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-5qos-62xl-deqq-pphf.json"}},{"package":{"name":"tailscale-fips","ecosystem":"Docker Hardened Images:Alpine:3.23","purl":"pkg:apk/dhi/tailscale-fips"},"versions":["1.100.0-r0","1.100.0-r1","1.100.0-r2","1.100.0-r3","1.100.0-r4","1.100.0-r5","1.102.0-r0","1.102.0-r1","1.102.2-r0","1.102.2-r1","1.102.3-r0","1.102.3-r1","1.102.3-r2","1.102.3-r3","1.102.3-r4","1.102.4-r0","1.102.5-r0","1.104.0-r0","1.104.1-r0","1.104.1-r1","1.104.1-r2","1.104.2-r0","1.104.4-r0","1.104.4-r1","1.104.5-r0","1.104.5-r1","1.98.1-r0","1.98.2-r0","1.98.2-r1","1.98.2-r2","1.98.3-r0","1.98.3-r1","1.98.3-r2","1.98.4-r0","1.98.5-r0","1.98.5-r1"],"database_specific":{"owner_kind":"HSP","source":"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-5qos-62xl-deqq-pphf.json"}},{"package":{"name":"tailscale-k8s-nameserver-dev","ecosystem":"Docker Hardened Images:Alpine:3.23","purl":"pkg:apk/dhi/tailscale-k8s-nameserver-dev"},"versions":["1.100.0-r0","1.100.0-r1","1.100.0-r2","1.100.0-r3","1.100.0-r4","1.100.0-r5","1.102.0-r0","1.102.0-r1","1.102.2-r0","1.102.2-r1","1.102.3-r0","1.102.3-r1","1.102.3-r2","1.102.3-r3","1.102.3-r4","1.102.4-r0","1.102.5-r0","1.104.0-r0","1.104.1-r0","1.104.1-r1","1.104.1-r2","1.104.2-r0","1.104.4-r0","1.104.4-r1","1.104.5-r0","1.104.5-r1","1.98.1-r0","1.98.2-r0","1.98.2-r1","1.98.2-r2","1.98.3-r0","1.98.3-r1","1.98.3-r2","1.98.4-r0","1.98.5-r0","1.98.5-r1"],"database_specific":{"owner_kind":"HSP","source":"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-5qos-62xl-deqq-pphf.json"}},{"package":{"name":"tailscale-k8s-nameserver-fips-dev","ecosystem":"Docker Hardened Images:Alpine:3.23","purl":"pkg:apk/dhi/tailscale-k8s-nameserver-fips-dev"},"versions":["1.100.0-r0","1.100.0-r1","1.100.0-r2","1.100.0-r3","1.100.0-r4","1.100.0-r5","1.102.0-r0","1.102.0-r1","1.102.2-r0","1.102.2-r1","1.102.3-r0","1.102.3-r1","1.102.3-r2","1.102.3-r3","1.102.3-r4","1.102.4-r0","1.102.5-r0","1.104.0-r0","1.104.1-r0","1.104.1-r1","1.104.1-r2","1.104.2-r0","1.104.4-r0","1.104.4-r1","1.104.5-r0","1.104.5-r1","1.98.1-r0","1.98.2-r0","1.98.2-r1","1.98.2-r2","1.98.3-r0","1.98.3-r1","1.98.3-r2","1.98.4-r0","1.98.5-r0","1.98.5-r1"],"database_specific":{"owner_kind":"HSP","source":"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-5qos-62xl-deqq-pphf.json"}},{"package":{"name":"tailscale-k8s-nameserver-fips","ecosystem":"Docker Hardened Images:Alpine:3.23","purl":"pkg:apk/dhi/tailscale-k8s-nameserver-fips"},"versions":["1.100.0-r0","1.100.0-r1","1.100.0-r2","1.100.0-r3","1.100.0-r4","1.100.0-r5","1.102.0-r0","1.102.0-r1","1.102.2-r0","1.102.2-r1","1.102.3-r0","1.102.3-r1","1.102.3-r2","1.102.3-r3","1.102.3-r4","1.102.4-r0","1.102.5-r0","1.104.0-r0","1.104.1-r0","1.104.1-r1","1.104.1-r2","1.104.2-r0","1.104.4-r0","1.104.4-r1","1.104.5-r0","1.104.5-r1","1.98.2-r2","1.98.3-r0","1.98.3-r1","1.98.3-r2","1.98.4-r0","1.98.5-r0","1.98.5-r1"],"database_specific":{"owner_kind":"HSP","source":"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-5qos-62xl-deqq-pphf.json"}},{"package":{"name":"tailscale-k8s-nameserver","ecosystem":"Docker Hardened Images:Alpine:3.23","purl":"pkg:apk/dhi/tailscale-k8s-nameserver"},"versions":["1.100.0-r0","1.100.0-r1","1.100.0-r2","1.100.0-r3","1.100.0-r4","1.100.0-r5","1.102.0-r0","1.102.0-r1","1.102.2-r0","1.102.2-r1","1.102.3-r0","1.102.3-r1","1.102.3-r2","1.102.3-r3","1.102.3-r4","1.102.4-r0","1.102.5-r0","1.104.0-r0","1.104.1-r0","1.104.1-r1","1.104.1-r2","1.104.2-r0","1.104.4-r0","1.104.4-r1","1.104.5-r0","1.104.5-r1","1.98.2-r2","1.98.3-r0","1.98.3-r1","1.98.3-r2","1.98.4-r0","1.98.5-r0","1.98.5-r1"],"database_specific":{"owner_kind":"HSP","source":"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-5qos-62xl-deqq-pphf.json"}},{"package":{"name":"tailscale-k8s-operator-dev","ecosystem":"Docker Hardened Images:Alpine:3.23","purl":"pkg:apk/dhi/tailscale-k8s-operator-dev"},"versions":["1.100.0-r0","1.100.0-r1","1.100.0-r2","1.100.0-r3","1.100.0-r4","1.100.0-r5","1.102.0-r0","1.102.0-r1","1.102.2-r0","1.102.2-r1","1.102.3-r0","1.102.3-r1","1.102.3-r2","1.102.3-r3","1.102.3-r4","1.102.4-r0","1.102.5-r0","1.104.0-r0","1.104.1-r0","1.104.1-r1","1.104.1-r2","1.104.2-r0","1.104.4-r0","1.104.4-r1","1.104.5-r0","1.104.5-r1","1.98.1-r0","1.98.2-r0","1.98.2-r1","1.98.2-r2","1.98.3-r0","1.98.3-r1","1.98.3-r2","1.98.4-r0","1.98.5-r0","1.98.5-r1"],"database_specific":{"source":"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-5qos-62xl-deqq-pphf.json","owner_kind":"HSP"}},{"package":{"name":"tailscale-k8s-operator-fips-dev","ecosystem":"Docker Hardened Images:Alpine:3.23","purl":"pkg:apk/dhi/tailscale-k8s-operator-fips-dev"},"versions":["1.100.0-r0","1.100.0-r1","1.100.0-r2","1.100.0-r3","1.100.0-r4","1.100.0-r5","1.102.0-r0","1.102.0-r1","1.102.2-r0","1.102.2-r1","1.102.3-r0","1.102.3-r1","1.102.3-r2","1.102.3-r3","1.102.3-r4","1.102.4-r0","1.102.5-r0","1.104.0-r0","1.104.1-r0","1.104.1-r1","1.104.1-r2","1.104.2-r0","1.104.4-r0","1.104.4-r1","1.104.5-r0","1.104.5-r1","1.98.1-r0","1.98.2-r0","1.98.2-r1","1.98.2-r2","1.98.3-r0","1.98.3-r1","1.98.3-r2","1.98.4-r0","1.98.5-r0","1.98.5-r1"],"database_specific":{"owner_kind":"HSP","source":"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-5qos-62xl-deqq-pphf.json"}},{"package":{"name":"tailscale-k8s-operator-fips","ecosystem":"Docker Hardened Images:Alpine:3.23","purl":"pkg:apk/dhi/tailscale-k8s-operator-fips"},"versions":["1.100.0-r0","1.100.0-r1","1.100.0-r2","1.100.0-r3","1.100.0-r4","1.100.0-r5","1.102.0-r0","1.102.0-r1","1.102.2-r0","1.102.2-r1","1.102.3-r0","1.102.3-r1","1.102.3-r2","1.102.3-r3","1.102.3-r4","1.102.4-r0","1.102.5-r0","1.104.0-r0","1.104.1-r0","1.104.1-r1","1.104.1-r2","1.104.2-r0","1.104.4-r0","1.104.4-r1","1.104.5-r0","1.104.5-r1","1.98.1-r0","1.98.2-r0","1.98.2-r1","1.98.2-r2","1.98.3-r0","1.98.3-r1","1.98.3-r2","1.98.4-r0","1.98.5-r0","1.98.5-r1"],"database_specific":{"owner_kind":"HSP","source":"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-5qos-62xl-deqq-pphf.json"}},{"package":{"name":"tailscale-k8s-operator","ecosystem":"Docker Hardened Images:Alpine:3.23","purl":"pkg:apk/dhi/tailscale-k8s-operator"},"versions":["1.100.0-r0","1.100.0-r1","1.100.0-r2","1.100.0-r3","1.100.0-r4","1.100.0-r5","1.102.0-r0","1.102.0-r1","1.102.2-r0","1.102.2-r1","1.102.3-r0","1.102.3-r1","1.102.3-r2","1.102.3-r3","1.102.3-r4","1.102.4-r0","1.102.5-r0","1.104.0-r0","1.104.1-r0","1.104.1-r1","1.104.1-r2","1.104.2-r0","1.104.4-r0","1.104.4-r1","1.104.5-r0","1.104.5-r1","1.98.1-r0","1.98.2-r0","1.98.2-r1","1.98.2-r2","1.98.3-r0","1.98.3-r1","1.98.3-r2","1.98.4-r0","1.98.5-r0","1.98.5-r1"],"database_specific":{"source":"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-5qos-62xl-deqq-pphf.json","owner_kind":"HSP"}},{"package":{"name":"tailscale","ecosystem":"Docker Hardened Images:Alpine:3.23","purl":"pkg:apk/dhi/tailscale"},"versions":["1.100.0-r0","1.100.0-r1","1.100.0-r2","1.100.0-r3","1.100.0-r4","1.100.0-r5","1.102.0-r0","1.102.0-r1","1.102.2-r0","1.102.2-r1","1.102.3-r0","1.102.3-r1","1.102.3-r2","1.102.3-r3","1.102.3-r4","1.102.4-r0","1.102.5-r0","1.104.0-r0","1.104.1-r0","1.104.1-r1","1.104.1-r2","1.104.2-r0","1.104.4-r0","1.104.4-r1","1.104.5-r0","1.104.5-r1","1.98.1-r0","1.98.2-r0","1.98.2-r1","1.98.2-r2","1.98.3-r0","1.98.3-r1","1.98.3-r2","1.98.4-r0","1.98.5-r0","1.98.5-r1"],"database_specific":{"owner_kind":"HSP","source":"https://github.com/docker-hardened-images/advisories-test/blob/main/osv/2026/DHI-5qos-62xl-deqq-pphf.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}]}