RLSA-2026:99707: Important: libpcap security update
The libpcap packages provide a portable framework for low-level network monitoring. The libpcap library provides network statistics collection, security monitoring, and network debugging.
Security Fix(es):
libpcap: libpcap: Denial of Service via infinite loop in BPF interpreter (CVE-2026-6554)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
rocky-linux/libpcapto a version that resolves this vulnerability.Fixed in 4:1.10.0-4.el9_9.2 - Upgrade
Upgrade
rocky-linux/libpcap-debuginfoto a version that resolves this vulnerability.Fixed in 4:1.10.0-4.el9_9.2 - Upgrade
Upgrade
rocky-linux/libpcap-debugsourceto a version that resolves this vulnerability.Fixed in 4:1.10.0-4.el9_9.2 - Upgrade
Upgrade
rocky-linux/libpcap-develto a version that resolves this vulnerability.Fixed in 4:1.10.0-4.el9_9.2
Event History
Frequently Asked Questions
What is the practical impact of this issue?
Successful exploitation can cause a denial of service through an infinite loop in the BPF interpreter. The reported CVSS vector indicates network reachability, low attack complexity, no required privileges, and no user interaction.
Which Rocky Linux packages should be reviewed for updates?
Review installed Rocky Linux libpcap packages, including libpcap, libpcap-debuginfo, libpcap-debugsource, and libpcap-devel.
Does the advisory identify confidentiality or integrity impact?
No. The provided CVSS vector lists confidentiality and integrity impact as none, while availability impact is high.