This security update for libpcap addresses several vulnerabilities: CVE-2026-0799 involves out-of-bounds access due to improper validation of scratch memory registers in BPF instructions; CVE-2026-6244 allows division by zero in certain ALU instructions; CVE-2026-6554 permits infinite loops via unbounded backward jumps in BPF programs; CVE-2026-18238 causes out-of-bounds access in rpcap client message processing; CVE-2026-18313 leads to memory leaks in rpcapd when handling specific client messages; CVE-2026-31911 causes process termination upon encountering invalid BPF opcodes; CVE-2026-31912 fails to detect buffer overruns or invalid jump offsets in BPF programs. These vulnerabilities collectively affect the stability and security of libpcap's packet filtering and remote capture functionalities.

Exploitation of these vulnerabilities can result in out-of-bounds memory access, causing potential memory corruption or crashes; division by zero errors leading to process termination; infinite loops causing denial of service; memory leaks that may exhaust system resources; and abrupt termination of processes due to invalid instructions. These impacts can degrade system stability and availability but no known exploits are reported in the wild.

A security update for libpcap has been released addressing these vulnerabilities. Applying the official patch from the vendor is recommended to remediate these issues. No additional mitigation steps are indicated by the vendor advisory.