CVE-2026-6244

A flaw was found in libpcap. The Berkeley Packet Filter (BPF) interpreter's 'div #k' and 'mod #k' instructions do not validate if the immediate value 'k' is zero. A local attacker with low privileges could exploit this by providing a specially crafted filter program, leading to a division-by-zero error. This could result in a denial of service (DoS) for the affected system.

This Moderate flaw in libpcap's BPF interpreter allows a local attacker with low privileges to trigger a denial of service. The vulnerability arises from insufficient validation of immediate values in 'div #k' and 'mod #k' ALU instructions, which can lead to a division-by-zero error when processing a specially crafted filter program. This impact is limited to local denial of service due to the required local access and low privileges.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.