CVE-2026-6554

A flaw was found in libpcap. The Berkeley Packet Filter (BPF) interpreter incorrectly handles offsets in 'ja L' instructions, allowing backward jumps without limiting loop iterations. A local attacker could provide a specially crafted filter program, leading to an infinite loop and causing a Denial of Service (DoS) condition.

This Moderate impact flaw in libpcap's BPF interpreter could lead to a denial of service. Exploitation requires a local attacker with low privileges to provide a specially crafted filter program, causing an infinite loop and resource exhaustion. This limits the attack surface to specific, uncommon use cases where arbitrary BPF filters can be supplied.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.