6.9
Medium
CVE-2026-56099 OpenBSD before commit 6a23123 (2026-06-18) contains an out-of-bounds read vulnerability in the mpls_do_error function…
Description
OpenBSD before commit 6a23123 (2026-06-18) contains an out-of-bounds read vulnerability in the mpls_do_error function within sys/netmpls/mpls_input.c that allows remote attackers to disclose kernel stack memory by sending crafted MPLS frames with 16 labels and no Bottom-of-Stack bit set.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| src | Versions not published |
References
- pop.argus-systems.ai pop.argus-systems.ai
- github.com github.com
- www.vulncheck.com www.vulncheck.com
Timeline
- Published
- Last modified