CVE-2026-46352

[CVE catalog]

Severity

High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Published

May 28, 2026, 12:00:00 AM UTC

Updated

Sep 16, 2026, 7:17:17 PM UTC

Source

[NVD] · [CVE record]

EPSS

0.47% · Oct 27, 2026

A flaw was found in Suricata. Suricata's IP defragmentation code could deadlock when processing fragmented network traffic that contains an encapsulated tunnel protocol whose payload is also fragmented. This could allow a remote attacker to cause a Denial of Service (DoS) by making the system unresponsive. A flaw of IMPORTANT severity was found in Suricata, a network intrusion detection, intrusion prevention, and network security monitoring engine. Suricata's IP defragmentation code could deadlock when processing fragmented network traffic that contains an encapsulated tunnel protocol whose payload is itself also fragmented. A remote attacker able to deliver such crafted network traffic could trigger this deadlock without requiring any privileges or user interaction, causing the Suricata process to become unresponsive and resulting in a denial of service. Both the Red Hat and upstream CVSS 3.1 assessments rate this flaw 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), so there is no difference from the upstream severity. Within the Red Hat ecosystem, this flaw is currently tracked only for the community-maintained suricata package in Fedora and EPEL; no Red Hat-shipped products are listed among the affected streams. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.