CVE-2026-6244
published 2026-09-05CVE-2026-6244: libpcap BPF interpreter for the 'div #k' and 'mod #k' ALU instructions does not check whether the immediate value is zero. In particular uncommon use cases a…
PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.15%
3.7th percentile
libpcap BPF interpreter for the 'div #k' and 'mod #k' ALU instructions does not check whether the immediate value is zero. In particular uncommon use cases a crafted filter program can cause a division by zero.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| openshift | ose-rhel-coreos-8 | — | — |
| openshift | ose-rhel-coreos-9 | — | — |
| the_tcpdump_group | libpcap | < 1.10.7 | 1.10.7 |
| the_tcpdump_group | libpcap | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
libpcap: libpcap: Denial of Service via crafted BPF filter program
vendor_redhat·2026-09-05·CVSS 5.5
CVE-2026-6244 [MEDIUM] CWE-369 libpcap: libpcap: Denial of Service via crafted BPF filter program
libpcap: libpcap: Denial of Service via crafted BPF filter program
libpcap BPF interpreter for the 'div #k' and 'mod #k' ALU instructions does not check whether the immediate value is zero. In particular uncommon use cases a crafted filter program can cause a division by zero.
A flaw was found in libpcap. The Berkeley Packet Filter (BPF) interpreter's 'div #k' and 'mod #k' instructions do not validate if the immediate value 'k' is zero. A local attacker with low privileges could exploit this by providing a specially crafted filter program, leading to a division-by-zero error. This could result in a denial of service (DoS) for the affected system.
Statement: This Moderate flaw in libpcap's BPF interpreter allows a local attacker with low privileges to trigger a denial of service. The vul
VulDB
Tcpdump Group libpcap up to 1.10.6 BPF Interpreter divide by zero (EUVD-2026-72018)
vuldb·2026-09-05·CVSS 5.5
CVE-2026-6244 [MEDIUM] Tcpdump Group libpcap up to 1.10.6 BPF Interpreter divide by zero (EUVD-2026-72018)
A vulnerability identified as problematic has been detected in Tcpdump Group libpcap up to 1.10.6. This issue affects some unknown processing of the component BPF Interpreter. The manipulation leads to divide by zero.
This vulnerability is traded as CVE-2026-6244. An attack has to be approached locally. There is no exploit available.
You should upgrade the affected component.
GHSA
libpcap BPF interpreter for the 'div #k' and 'mod #k' ALU instructions does not check whether the immediate value is zero.
ghsa_unreviewed·2026-09-05
CVE-2026-6244 [MEDIUM] CWE-369 libpcap BPF interpreter for the 'div #k' and 'mod #k' ALU instructions does not check whether the immediate value is zero.
libpcap BPF interpreter for the 'div #k' and 'mod #k' ALU instructions does not check whether the immediate value is zero. In particular uncommon use cases a crafted filter program can cause a division by zero.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-6244 libpcap: libpcap: Denial of Service via crafted BPF filter program [fedora-all]
bugzilla·2026-09-09·CVSS 5.5
CVE-2026-6244 [MEDIUM] CVE-2026-6244 libpcap: libpcap: Denial of Service via crafted BPF filter program [fedora-all]
CVE-2026-6244 libpcap: libpcap: Denial of Service via crafted BPF filter program [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
libpcap BPF interpreter for the 'div #k' and 'mod #k' ALU instructions does not check whether the immediate value is zero. In particular uncommon use cases a crafted filter program can cause a division by zero.
Bugzilla
CVE-2026-6244 libpcap: libpcap: Denial of Service via crafted BPF filter program
bugzilla·2026-09-05·CVSS 5.5
CVE-2026-6244 [MEDIUM] CVE-2026-6244 libpcap: libpcap: Denial of Service via crafted BPF filter program
CVE-2026-6244 libpcap: libpcap: Denial of Service via crafted BPF filter program
libpcap BPF interpreter for the 'div #k' and 'mod #k' ALU instructions does not check whether the immediate value is zero. In particular uncommon use cases a crafted filter program can cause a division by zero.
2026-09-05
Published