CVE-2026-7164 PUBLISHED

pf can overflow the stack parsing crafted SCTP packets

Assigner: freebsd
Reserved: 27.04.2026 Published: 30.04.2026 Updated: 30.04.2026

Incorrect packet validation allowed unbounded recursion parsing SCTP chunk parameters. This can eventually result in a stack overflow and panic.

Remote attackers can craft packets which cause affected systems to panic. This affects any system where pf is configured to process traffic, independent of the configured ruleset.

Product Status

Vendor FreeBSD
Product FreeBSD
Versions Default: unknown
  • affected from 15.0-RELEASE to p7 (excl.)
  • affected from 14.4-RELEASE to p3 (excl.)
  • affected from 14.3-RELEASE to p12 (excl.)
  • affected from 13.5-RELEASE to p13 (excl.)

Credits

  • Igor Gabriel Sousa e Souza finder

References

Problem Types

  • CWE-674: Uncontrolled Recursion CWE
  • CWE-791: Incomplete Filtering of Special Elements CWE