ICMP Echo Reply Vulnerability in libslirp Networking Layer
CVE-2026-115449

3.5LOW

Key Information:

Vendor

Red Hat
Status
Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 8
Red Hat Enterprise Linux 9
Red Hat Openshift Container Platform 4
Vendor
CVE Published:
22 October 2026

What is CVE-2026-115449?

A vulnerability in the libslirp networking layer allows for the exposure of a host's real IP address within ICMP echo replies. This occurs due to a failure to properly update the reply length when handling ICMP echo requests. Consequently, under certain conditions where the standard ICMP socket is unavailable, this flaw breaks the NAT isolation intended by user-mode networking. As a result, sensitive network data can be inadvertently disclosed to untrusted guests, posing significant risks to system integrity and user privacy.

References

https://access.redhat.com/security/cve/CVE-2026-115449
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2558916
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
3.5
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Red Hat would like to thank Piyusha Akash for reporting this issue.
.