This security update for libpcap addresses several vulnerabilities: CVE-2026-0799 involves lack of validation in BPF instructions causing OOB access; CVE-2026-6244 allows division by zero in 'div #k' and 'mod #k' ALU instructions; CVE-2026-6554 permits infinite loops due to unbounded backward jumps in 'ja L' instructions; CVE-2026-18238 concerns improper header validation in rpcap client leading to OOB access; CVE-2026-18313 is a memory leak in rpcapd from unfreed allocations per certain messages; CVE-2026-31911 causes process termination via abort() on invalid BPF opcode; and CVE-2026-31912 involves missing checks for filter program buffer boundaries causing potential invalid memory access. These collectively impact the libpcap BPF interpreter and rpcap components.

Exploitation of these vulnerabilities can lead to out-of-bounds memory access, causing potential memory corruption or crashes; division by zero errors causing process termination; infinite loops leading to resource exhaustion; memory leaks causing increased memory usage; and forced termination of processes using libpcap. These impacts can disrupt applications relying on libpcap for packet capturing and filtering.

A security update fixing these vulnerabilities is available from the SUSE Product Security Team. Users should apply the official patches provided by the vendor to remediate these issues. No additional mitigation steps are indicated beyond applying the update.