Cpe:2.3:a:freedesktop:libslirp:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3afreedesktoplibslirp/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 03 Nov 2026 04:05:06 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svglibslirp: Denial of service in if_output (CVE-2026-120831)https://feed.craftedsignal.io/briefs/2026-11-libslirp-denial-of-service/Tue, 03 Nov 2026 04:05:06 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-libslirp-denial-of-service/A queue pointer corruption vulnerability in libslirp allows an adjacent attacker to crash the host networking process via burst traffic, leading to a denial of service.A vulnerability exists in the libslirp library within the if_output() function, identified as CVE-2026-120831. An attacker can trigger memory corruption when the library attempts to move a session from the fast queue to the batch queue. By unlinking and reinserting an arbitrary packet via ifm->m_nextpkt instead of the session queue head, the library corrupts internal queue pointers.

Impact

Successful exploitation results in a crash of the host networking process, leading to a denial of service for the affected host. This impact is confirmed by the Red Hat bugzilla report.

Recommendation

  • Inventory systems utilizing libslirp, particularly virtual machine hosts or container runtimes relying on this user-mode networking library.
  • Review the provided Red Hat Bugzilla report and Gitlab commit for patch availability or mitigating configuration changes.
  • Prioritize patching for internet-facing or multi-tenant virtualization environments where an adjacent attacker could potentially reach the interface.
]]>lowadvisory