Live › vulnerability › CVE-2026-120831
libslirp, the user-mode networking library used by QEMU and similar tools, corrupts its packet queue pointers when moving a session between queues. A guest that generates burst traffic can crash the host networking process, causing denial of service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 02:47 UTC. All times on this page are UTC.
Systems that run guest virtual machines with libslirp user-mode networking on the host. The sources do not name affected libslirp versions or a fixed release. Hosts using only bridged or tap networking, or with no untrusted guests, are less exposed.
No product ranges from the sources yet.
qemu-system-x86_64 --version and ldd $(which qemu-system-x86_64) | grep slirp-netdev user) rather than a bridge or tap deviceNo fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A flaw was found in libslirp in if_output(). When moving a session from the fast queue to the batch queue, the code unlinked and reinserted an arbitrary packet via ifm->m_nextpkt instead of the session queue head, corrupting queue pointers. A guest generating burst traffic could crash the host networking process, causing a denial of service.
This page as .md · .json · in your agent: get_signal("CVE-2026-120831")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.