In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to try reading and writing the OS process memory in the 16GiB starting at the current stack frame on 64-bit architectures and in the entire address space on 32-bit architectures.
CVSS Details
- CVSS 3.1 Base Score: 8.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libpcapUpgrade libpcap-devel | Oct 11, 2026 | Oct 1, 2026 |
| Alpine Linux | — | Upgrade libpcap | Sep 7, 2026 | Sep 5, 2026 |
| Amazon Linux Ami 2 | — | Upgrade libpcapUpgrade libpcap-debuginfoUpgrade libpcap-devel | Oct 19, 2026 | Oct 19, 2026 |
| Amazon_linux_2023 | — | Upgrade libpcap-debuginfoUpgrade libpcap-debugsourceUpgrade libpcapUpgrade libpcap-devel | Sep 30, 2026 | Sep 5, 2026 |
| Oracle_linux | — | Upgrade libpcapUpgrade libpcap-devel | Oct 22, 2026 | Sep 5, 2026 |
| Redhat Openshift | — | Upgrade ose-rhel-coreos | Oct 30, 2026 | Sep 5, 2026 |
| Redhat_linux | — | Upgrade libpcap-debuginfoNo solution existsUpgrade libpcap-debugsourceUpgrade libpcap-develUpgrade libpcap | Sep 10, 2026 | Sep 5, 2026 |
| Rocky_linux | — | Upgrade libpcap-debugsourceUpgrade libpcapUpgrade libpcap-debuginfoUpgrade libpcap-devel | Oct 5, 2026 | Oct 2, 2026 |
| Ubuntu | — | Upgrade libpcap0.8 (Ubuntu Pro)Upgrade libpcap0.8t64Upgrade libpcap0.8 | Sep 27, 2026 | Sep 25, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub