Vulnerability Description
A vulnerability was found in the network packet de-fragmentation engine of kronosnet (Version affected <= 1.34). The internal reassembly code does not properly validate sequence numbers of incoming payload fragments. An attacker can exploit this lack of verification by transmitting malformed packets with corrupted sequence parameters. Under specific conditions, this forces the packet processing layer to parse data outside the designated bounds of the internal memory structures, causing an out-of-bounds memory access or heap corruption. This behavior can result in sudden application crashes or system instability.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://access.redhat.com/security/cve/CVE-2026-15813
- https://bugzilla.redhat.com/show_bug.cgi?id=2500854
FAQ
What is CVE-2026-15813?
CVE-2026-15813 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A vulnerability was found in the network packet de-fragmentation engine of kronosnet (Version affected <= 1.34). The internal reassembly code does not properly validate sequence numbers of incoming pa...
How severe is CVE-2026-15813?
CVE-2026-15813 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-15813?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.