CVE-2026-7164 Details
Description
Incorrect packet validation allowed unbounded recursion parsing SCTP chunk parameters. This can eventually result in a stack overflow and panic. Remote attackers can craft packets which cause affected systems to panic. This affects any system where pf is configured to process traffic, independent of the configured ruleset.
A stack overflow vulnerability has been identified in the FreeBSD packet filter (pf) when processing crafted SCTP packets. This issue arises from incorrect packet validation, which allows for unbounded recursion while parsing SCTP chunk parameters. As a result, remote attackers can send specially crafted packets that cause the system to panic. This vulnerability affects all supported versions of FreeBSD where pf is configured to handle traffic, regardless of the specific ruleset in use.
Users can upgrade to a supported FreeBSD stable or release branch dated after the correction date. Instructions for updating via the pkg utility, freebsd-update utility, or by applying a source code patch are available in the FreeBSD Security Advisory FreeBSD-SA-26:14.pf.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Apr 30, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://security.freebsd.org/advisories/FreeBSD-SA-26:14.pf.asc | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-674 | Uncontrolled Recursion | [email protected] |
| CWE-791 | Incomplete Filtering of Special Elements | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| freebsd freebsd | 13.5 - 13.5 beta3 13.5 p1 13.5 p10 13.5 p11 13.5 p12 13.5 p2 13.5 p3 13.5 p4 13.5 p5 13.5 p6 13.5 p7 13.5 p8 13.5 p9 14.3 - 14.3 p1 14.3 p10 14.3 p11 14.3 p2 14.3 p3 14.3 p4 14.3 p5 14.3 p6 14.3 p7 14.3 p8 14.3 p9 14.4 - 14.4 p1 14.4 p2 14.4 rc1 15.0 - 15.0 p1 15.0 p2 15.0 p3 15.0 p4 15.0 p5 15.0 p6 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 1, 2026 | Initial Analysis | [email protected] |
| Apr 30, 2026 | CVE Modified | CISA-ADP |
| Apr 30, 2026 | New CVE Received | [email protected] |