🚨 CVE-2026-31911
libpcap BPF interpreter calls abort() if it encounters a BPF instruction that has an invalid opcode. In particular uncommon use cases a crafted filter program can terminate the OS process.
🎖@cveNotify
GitHub
CVE-2026-31911: Fail opcodes safely in the BPF interpreter. · the-tcpdump-group/libpcap@a715bcd
This vulnerability has been discovered by FuzzAnything Organization.
The current revision of pcapint_filter_with_aux_data() calls abort() if
the current instruction opcode is invalid, and assumes ...
September 5, 2026 26
