Memory Exhaustion Vulnerability in Suricata Network IDS from OISF

CVE-2026-31935

What is CVE-2026-31935?

The Suricata network intrusion detection and prevention system is susceptible to a memory exhaustion issue stemming from the flooding of crafted HTTP2 continuation frames. This vulnerability can result in excessive memory usage, typically causing the Suricata process to be terminated by the operating system. Versions 7.0.15 and 8.0.4 and later have implemented patches to mitigate this risk. Users are encouraged to upgrade to these versions promptly to ensure continued security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References