Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
AlmaLinux Nginx could exceed request limit, causing errors
published 14 days ago
Summary
The AlmaLinux Nginx packages (nginx, nginx-all-modules, nginx-core, nginx-filesystem, nginx-mod-devel) may allow more pending asynchronous operations than intended, which can overflow an internal counter. This overflow can lead to request handling problems or service disruption. Apply the latest package update that limits pending operations to the safe maximum.
What to do
- Update almalinux nginx to version 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els13.
- Update almalinux nginx-all-modules to version 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els13.
- Update almalinux nginx-core to version 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els13.
- Update almalinux nginx-filesystem to version 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els13.
- Update almalinux nginx-mod-devel to version 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els13.
- Update almalinux nginx-mod-http-image-filter to version 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els13.
- Update almalinux nginx-mod-http-perl to version 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els13.
- Update almalinux nginx-mod-http-xslt-filter to version 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els13.
- Update almalinux nginx-mod-mail to version 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els13.
- Update almalinux nginx-mod-stream to version 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els13.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:AlmaLinux:9.6 | almalinux | nginx |
< 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els13 Fix: upgrade to 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els13
|
| TuxCare:AlmaLinux:9.6 | almalinux | nginx-all-modules |
< 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els13 Fix: upgrade to 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els13
|
| TuxCare:AlmaLinux:9.6 | almalinux | nginx-core |
< 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els13 Fix: upgrade to 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els13
|
| TuxCare:AlmaLinux:9.6 | almalinux | nginx-filesystem |
< 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els13 Fix: upgrade to 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els13
|
| TuxCare:AlmaLinux:9.6 | almalinux | nginx-mod-devel |
< 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els13 Fix: upgrade to 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els13
|
| TuxCare:AlmaLinux:9.6 | almalinux | nginx-mod-http-image-filter |
< 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els13 Fix: upgrade to 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els13
|
| TuxCare:AlmaLinux:9.6 | almalinux | nginx-mod-http-perl |
< 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els13 Fix: upgrade to 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els13
|
| TuxCare:AlmaLinux:9.6 | almalinux | nginx-mod-http-xslt-filter |
< 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els13 Fix: upgrade to 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els13
|
| TuxCare:AlmaLinux:9.6 | almalinux | nginx-mod-mail |
< 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els13 Fix: upgrade to 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els13
|
| TuxCare:AlmaLinux:9.6 | almalinux | nginx-mod-stream |
< 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els13 Fix: upgrade to 2:1.20.1-22.el9_6.3.alma.2.tuxcare.els13
|
Original advisory text
nginx: Fix of CVE-2026-97205
- CVE-2026-97205: limit pending asynchronous operations per request to
NGX_HTTP_MAX_BLOCKED so the 8-bit r->main->blocked counter cannot wrap
NGX_HTTP_MAX_BLOCKED so the 8-bit r->main->blocked counter cannot wrap
References
- https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1792589925.html Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-97205 Vendor Advisory
Timeline
Published22 Oct 2026
Updated26 Oct 2026
First seen26 Oct 2026
Sources
CLSA-2026-1792589925 · OSV
Track software like this
Free during beta