QSN-8824-1: libpcap vulnerability
2026-09-25

Summary:
Applications using libpcap could be made to crash if given specially
crafted data.

Details:
It was discovered that libpcap did not properly validate BPF instructions
in some situation. An attacker could possibly use this issue to perform out
of bound memory operations.

Affected QuantaStor releases:
  6.9.1.001 jammy: libpcap0.8 1.10.1-4build1 (fixed in 1.10.1-4ubuntu1.22.04.2)
  6.9.0.464 jammy: libpcap0.8 1.10.1-4build1 (fixed in 1.10.1-4ubuntu1.22.04.2)
  6.8.6.015 jammy: libpcap0.8 1.10.1-4build1 (fixed in 1.10.1-4ubuntu1.22.04.2)
  6.8.5.018 jammy: libpcap0.8 1.10.1-4build1 (fixed in 1.10.1-4ubuntu1.22.04.2)
  6.8.4.038 jammy: libpcap0.8 1.10.1-4build1 (fixed in 1.10.1-4ubuntu1.22.04.2)
  6.8.3.018 jammy: libpcap0.8 1.10.1-4build1 (fixed in 1.10.1-4ubuntu1.22.04.2)
  6.8.2.002 jammy: libpcap0.8 1.10.1-4build1 (fixed in 1.10.1-4ubuntu1.22.04.2)
  6.8.1.007 jammy: libpcap0.8 1.10.1-4build1 (fixed in 1.10.1-4ubuntu1.22.04.2)
  6.8.0.205 jammy: libpcap0.8 1.10.1-4build1 (fixed in 1.10.1-4ubuntu1.22.04.2)

CVEs: CVE-2026-0799

References:
  https://ubuntu.com/security/notices/USN-8824-1