CVE-2026-71855

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 7.0.17 Suricata versions prior to 8.0.6

Description In the src/flow-hash.c file, the system may treat an IPv4 and IPv6 flow as identical if their raw address words, ports, protocol, VLAN, recursion level, live device, and hash bucket align, as it fails to compare the IP family. This allows an IPv6 packet to reuse an IPv4 flow state or vice versa, which can lead to incorrect flowbit state, detection bypass, or IP-only bypass.

Recommendations Update to version 7.0.17. Update to version 8.0.6.