CVE-2026-115449 Libslirp: libslirp: icmp echo reply length desynchronization leaks host ip to guest
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-115449?
CVE-2026-115449 is a low-severity vulnerability in Red Hat Enterprise Linux 10, published on 22 Oct 2026.
Official description
A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated to match the actual data received from the host. Under specific conditions where the normal ICMP socket is unavailable, this length mismatch causes the host's real IP address to be leaked to the guest in the echo reply, breaking the NAT isolation that user-mode networking is expected to provide.
Weakness: CWE-200
Which versions are affected by CVE-2026-115449?
How do I fix CVE-2026-115449?
No fix has been published for CVE-2026-115449 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-115449 being exploited?
There is no known exploitation of CVE-2026-115449 in the wild and no public exploit code.
Sources
Also known as AZL-111020, DEBIAN-CVE-2026-115449, GHSA-pg96-xmqg-mmpv, UBUNTU-CVE-2026-115449.