Denial of Service Vulnerability in libslirp Affecting Red Hat Products
CVE-2026-120831
6.5MEDIUM
What is CVE-2026-120831?
A vulnerability exists in libslirp's if_output() function, where improper handling of packet processing during session management can lead to a denial of service. Specifically, when transitioning a session from the fast queue to the batch queue, the code incorrectly unlinks and reinserts an arbitrary packet instead of referring to the session queue head. This flaw can result in corruption of queue pointers, allowing guest systems that generate burst traffic to potentially crash the host's networking processes.
References
CVSS V3.1
Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Red Hat would like to thank Piyusha Akash (Manifold Operations) for reporting this issue.