🚨 CVE-2026-6554
libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. In particular uncommon use cases a crafted filter program can cause the interpreter to loop infinitely.
🎖@cveNotify
GitHub
CVE-2026-6554: Limit "ja L" looping in pcap_offline_filter(). · the-tcpdump-group/libpcap@ff3c834
This vulnerability has been discovered by Kaixuan LI.
The current revision of pcapint_filter_with_aux_data() assumes that any
"ja L" instruction in a filter program does not jump...
September 5, 2026 66
