UBUNTU-CVE-2026-120831: Medium severity ubuntu/libslirp vulnerability
A flaw was found in libslirp in ifoutput(). When moving a session from the fast queue to the batch queue, the code unlinked and reinserted an arbitrary packet via ifm->mnextpkt instead of the session queue head, corrupting queue pointers. A guest generating burst traffic could crash the host networking process, causing a denial of service.
Affected Software
Event History
Frequently Asked Questions
What level of access does an attacker need?
The CVSS vector indicates adjacent-network attack access, with no privileges or user interaction required. The described trigger involves a guest generating burst traffic.
What is the expected impact if exploitation succeeds?
The impact is denial of service: queue-pointer corruption can crash the host networking process. The supplied CVSS vector indicates high availability impact and no confidentiality or integrity impact.
Is user interaction required to trigger the issue?
No. The CVSS vector specifies that no user interaction is required.