MEDIUM 6.5 NVD
CVE-2026-120831
A flaw was found in libslirp in if_output(). When moving a session from the fast queue to the batch queue, the code unlinked and reinserted an arbitrary packet
A flaw was found in libslirp in if_output(). When moving a session from the fast queue to the batch queue, the code unlinked and reinserted an arbitrary packet via ifm->m_nextpkt instead of the session queue head, corrupting queue pointers. A guest generating burst traffic could crash the host networking process, causing a denial of service.
References
- https://access.redhat.com/security/cve/CVE-2026-120831
- https://bugzilla.redhat.com/show_bug.cgi?id=2565425
- https://gitlab.freedesktop.org/slirp/libslirp/-/commit/bad35bd3b529dc47aa109980a69a36da784
This medium severity vulnerability with a CVSS score of 6.5 was published on 2026-11-03 via NVD.
vulnfeed aggregates 18371 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.