CVE-2026-6531

A flaw was found in Wireshark. The SANE (Scanner Access Now Easy) protocol dissector contains an infinite loop vulnerability. A local user processing specially crafted SANE protocol traffic, such as opening a malicious capture file, can trigger this flaw, leading to a denial of service (DoS) in Wireshark.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, users should avoid opening untrusted capture files or processing SANE protocol traffic from untrusted sources. If Wireshark is not actively used, consider removing the wireshark package to eliminate the attack surface. For Red Hat Enterprise Linux and Fedora, this can be done using sudo dnf remove wireshark. Warning: Removing Wireshark may impact network analysis capabilities.