Stack Overflow Vulnerability in Network Traffic Processing on FreeBSD Systems

CVE-2026-7164

What is CVE-2026-7164?

A vulnerability exists in the FreeBSD pf (packet filter) component due to incorrect validation of SCTP chunk parameters. This issue allows remote attackers to send specially crafted packets that can trigger unbounded recursion during the parsing process, potentially leading to a stack overflow and system panic. This vulnerability affects all systems configured to use pf for traffic processing, regardless of the active ruleset, posing a significant risk to network integrity.

References