CVE-2026-7164 — pf can overflow the stack parsing crafted SCTP packets

CVE-2026-7164

pf can overflow the stack parsing crafted SCTP packets PUBLISHED

Description (CNA)

Incorrect packet validation allowed unbounded recursion parsing SCTP chunk parameters. This can eventually result in a stack overflow and panic. Remote attackers can craft packets which cause affected systems to panic. This affects any system where pf is configured to process traffic, independent of the configured ruleset.

Affected (CNA)

Vendor / product	Versions
FreeBSD / FreeBSD	affected 15.0-RELEASE before p7; affected 14.4-RELEASE before p3; affected 14.3-RELEASE before p12; affected 13.5-RELEASE before p13

CWE

CWE-674, CWE-791

References

https://security.freebsd.org/advisories/FreeBSD-SA-26:14.pf.asc

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.