CVE-2026-31931: Suricata tls: null dereference in tls.alpn rule keyword
Published Apr 2, 2026
·Updated
Suricata is a network IDS, IPS and NSM engine. From version 8.0.0 to before version 8.0.4, use of the "tls.alpn" rule keyword can cause Suricata to crash with a NULL dereference. This issue has been patched in version 8.0.4.
Affected Software
2 affected componentsFixes available
OISF Suricata>=8.0.0<8.0.4
alpine/suricata>=8.0.0<8.0.6-r0
8.0.6-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/suricatato a version that resolves this vulnerability.Fixed in 8.0.6-r0 - Upgrade
Upgrade
Suricatato a version that resolves this vulnerability.Fixed in 8.0.4
Event History
Apr 2, 2026
CVE Published
via MITRE·02:01 PM
Data Sourced
via MITRE·02:01 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:16 PM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·02:16 PM
DescriptionSeverityAffected Software