CVE-2026-120830

Name of the Vulnerable Software and Affected Versions libslirp (affected versions not specified) RHEL 8 RHEL 9 RHEL 10 OpenShift 4 OpenShift 5

Description A flaw exists in the icmp forward error() function. When constructing an ICMP error response, the length of the quoted original IPv4 packet is retrieved from the IP header without being clamped to the actual buffer length. This allows a truncated or malformed packet to trigger an out-of-bounds heap read, which can leak host memory into the ICMP error packet sent to a guest or container.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.