# CVE-2026-0799: OOBR and OOBW in libpcap before 1.10.7 CVE-2026-0799 is fixed in 6 products on 1 platform, first by libpcap0.8t64 1.10.6-1ubuntu1.1, released September 5, 2026. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2026-0799 - Priority: High - CVSS: 8.7 (Important) - EPSS: 0.0011 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Sep 5, 2026 - Weakness: Improper Validation of Array Index - Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0799 ## Description In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to try reading and writing the OS process memory in the 16GiB starting at the current stack frame on 64-bit architectures and in the entire address space on 32-bit architectures. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | libpcap Debian 14 | 1.10.7-1 | [DEBIAN-CVE-2026-0799](https://patchblox.com/security/data/fix/linux/debian-cve-2026-0799.md) | Sep 14, 2026 | | Linux | libpcap Fedora 43 | 14:1.10.7-1.fc43 | [FEDORA-2026-4401B94AD0](https://patchblox.com/security/data/fix/linux/fedora-2026-4401b94ad0.md) | Sep 10, 2026 | | Linux | libpcap RHEL 10 | 1.10.4-7.el10_2.1 | [RHSA-2026:74442](https://patchblox.com/security/data/fix/linux/rhsa-2026-74442.md) | Oct 2, 2026 | | Linux | libpcap RHEL 8 | 14:1.9.1-6.el8_10 | [RHSA-2026:76045](https://patchblox.com/security/data/fix/linux/rhsa-2026-76045.md) | Oct 5, 2026 | | Linux | libpcap RHEL 9 | 14:1.10.0-4.el9_8.1 | [RHSA-2026:74441](https://patchblox.com/security/data/fix/linux/rhsa-2026-74441.md) | Oct 2, 2026 | | Linux | libpcap almalinux 10 | 14:1.10.4-7.el10_2.1 | [ALSA-2026:74442](https://patchblox.com/security/data/fix/linux/alsa-2026-74442.md) | Oct 1, 2026 | | Linux | libpcap almalinux 8 | 14:1.9.1-6.el8_10 | [ALSA-2026:76045](https://patchblox.com/security/data/fix/linux/alsa-2026-76045.md) | Oct 5, 2026 | | Linux | libpcap almalinux 9 | 14:1.10.0-4.el9_8.1 | [ALSA-2026:74441](https://patchblox.com/security/data/fix/linux/alsa-2026-74441.md) | Oct 1, 2026 | | Linux | libpcap amzn 2023 | 14:1.10.7-1.amzn2023.0.1 | [ALAS2023-2026-3100](https://patchblox.com/security/data/fix/linux/alas2023-2026-3100.md) | Sep 28, 2026 | | Linux | libpcap ol 10 | 14:1.10.4-7.el10_2.1 | [ELSA-2026-74442](https://patchblox.com/security/data/fix/linux/elsa-2026-74442.md) | Oct 1, 2026 | | Linux | libpcap ol 8 | 14:1.9.1-6.el8_10 | [ELSA-2026-76045](https://patchblox.com/security/data/fix/linux/elsa-2026-76045.md) | Oct 5, 2026 | | Linux | libpcap ol 9 | 14:1.10.0-4.el9_8.1 | [ELSA-2026-74441](https://patchblox.com/security/data/fix/linux/elsa-2026-74441.md) | Oct 1, 2026 | | Linux | libpcap opensuse-leap 16.0 | 1.10.5-160000.5.1 | [OPENSUSE-SU-2026:21940-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21940-1.md) | Sep 23, 2026 | | Linux | libpcap rocky 10 | 4:1.10.4-7.el10_2.1 | [RLSA-2026:74442](https://patchblox.com/security/data/fix/linux/rlsa-2026-74442.md) | Oct 2, 2026 | | Linux | libpcap rocky 8 | 4:1.9.1-6.el8_10 | [RLSA-2026:76045](https://patchblox.com/security/data/fix/linux/rlsa-2026-76045.md) | Oct 7, 2026 | | Linux | libpcap rocky 9 | 4:1.10.0-4.el9_8.1 | [RLSA-2026:74441](https://patchblox.com/security/data/fix/linux/rlsa-2026-74441.md) | Oct 2, 2026 | | Linux | libpcap sles 15.6 | 1.10.4-150600.3.12.1 | [SUSE-SU-2026:4194-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4194-1.md) | Sep 15, 2026 | | Linux | libpcap sles 15.7 | 1.10.5-150700.3.13.1 | [SUSE-SU-2026:4188-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4188-1.md) | Sep 15, 2026 | | Linux | libpcap sles 16.0 | 1.10.5-160000.5.1 | [SUSE-SU-2026:23907-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-23907-1.md) | Sep 23, 2026 | | Linux | libpcap-debuginfo Fedora 43 | 14:1.10.7-1.fc43 | [FEDORA-2026-4401B94AD0](https://patchblox.com/security/data/fix/linux/fedora-2026-4401b94ad0.md) | Sep 10, 2026 | | Linux | libpcap-debuginfo amzn 2023 | 14:1.10.7-1.amzn2023.0.1 | [ALAS2023-2026-3100](https://patchblox.com/security/data/fix/linux/alas2023-2026-3100.md) | Sep 28, 2026 | | Linux | libpcap-debugsource Fedora 43 | 14:1.10.7-1.fc43 | [FEDORA-2026-4401B94AD0](https://patchblox.com/security/data/fix/linux/fedora-2026-4401b94ad0.md) | Sep 10, 2026 | | Linux | libpcap-debugsource amzn 2023 | 14:1.10.7-1.amzn2023.0.1 | [ALAS2023-2026-3100](https://patchblox.com/security/data/fix/linux/alas2023-2026-3100.md) | Sep 28, 2026 | | Linux | libpcap-devel Fedora 43 | 14:1.10.7-1.fc43 | [FEDORA-2026-4401B94AD0](https://patchblox.com/security/data/fix/linux/fedora-2026-4401b94ad0.md) | Sep 10, 2026 | | Linux | libpcap-devel RHEL 8 | 14:1.9.1-6.el8_10 | [RHSA-2026:76045](https://patchblox.com/security/data/fix/linux/rhsa-2026-76045.md) | Oct 5, 2026 | | Linux | libpcap-devel RHEL 9 | 14:1.10.0-4.el9_8.1 | [RHSA-2026:74441](https://patchblox.com/security/data/fix/linux/rhsa-2026-74441.md) | Oct 2, 2026 | | Linux | libpcap-devel almalinux 10 | 14:1.10.4-7.el10_2.1 | [ALSA-2026:74442](https://patchblox.com/security/data/fix/linux/alsa-2026-74442.md) | Oct 1, 2026 | | Linux | libpcap-devel almalinux 8 | 14:1.9.1-6.el8_10 | [ALSA-2026:76045](https://patchblox.com/security/data/fix/linux/alsa-2026-76045.md) | Oct 5, 2026 | | Linux | libpcap-devel almalinux 9 | 14:1.10.0-4.el9_8.1 | [ALSA-2026:74441](https://patchblox.com/security/data/fix/linux/alsa-2026-74441.md) | Oct 1, 2026 | | Linux | libpcap-devel amzn 2023 | 14:1.10.7-1.amzn2023.0.1 | [ALAS2023-2026-3100](https://patchblox.com/security/data/fix/linux/alas2023-2026-3100.md) | Sep 28, 2026 | | Linux | libpcap-devel ol 10 | 14:1.10.4-7.el10_2.1 | [ELSA-2026-74442](https://patchblox.com/security/data/fix/linux/elsa-2026-74442.md) | Oct 1, 2026 | | Linux | libpcap-devel ol 8 | 14:1.9.1-6.el8_10 | [ELSA-2026-76045](https://patchblox.com/security/data/fix/linux/elsa-2026-76045.md) | Oct 5, 2026 | | Linux | libpcap-devel ol 9 | 14:1.10.0-4.el9_8.1 | [ELSA-2026-74441](https://patchblox.com/security/data/fix/linux/elsa-2026-74441.md) | Oct 1, 2026 | | Linux | libpcap0.8 Ubuntu 18.04.6 LTS (bionic) | 1.8.1-6ubuntu1.18.04.2+esm1 | [libpcap0.8 1.8.1-6ubuntu1.18.04.2+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libpcap0.8-1.8.1-6ubuntu1.18.04.2-esm1.md) | Sep 28, 2026 | | Linux | libpcap0.8 Ubuntu 20.04 LTS (focal) | 1.9.1-3ubuntu1.20.04.1+esm1 | [libpcap0.8 1.9.1-3ubuntu1.20.04.1+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libpcap0.8-1.9.1-3ubuntu1.20.04.1-esm1.md) | Sep 28, 2026 | | Linux | libpcap0.8 Ubuntu 22.04.1 LTS (jammy) | 1.10.1-4ubuntu1.22.04.2 | [libpcap0.8 1.10.1-4ubuntu1.22.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libpcap0.8-1.10.1-4ubuntu1.22.04.2.md) | Sep 28, 2026 | | Linux | libpcap0.8t64 Ubuntu 24.04.5 LTS (noble) | 1.10.4-4.1ubuntu3.1 | [libpcap0.8t64 1.10.4-4.1ubuntu3.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libpcap0.8t64-1.10.4-4.1ubuntu3.1.md) | Sep 28, 2026 | | Linux | libpcap0.8t64 Ubuntu 26.04.1 LTS (resolute) | 1.10.6-1ubuntu1.1 | [libpcap0.8t64 1.10.6-1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-resolute-libpcap0.8t64-1.10.6-1ubuntu1.1.md) | Sep 5, 2026 | --- Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.