CVE-2026-71855Published
Suricata flow: IPv4/IPv6 hash collision can reuse wrong flow state
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-71855 · Microsoft / collected KEV context
cve-program · CVE-2026-71855
- https://github.com/OISF/suricata/security/advisories/GHSA-fvwh-wjcq-2586
- https://github.com/OISF/suricata/commit/181b3b2fdd1fe87e4534de4fc79e29a083ef125f
- https://github.com/OISF/suricata/commit/4e2f23d031fbcfd72883bacd3d723c9874f23701
- https://github.com/OISF/suricata/commit/bc41dcc854e24487d3786ce578a8a86a8350ab20
- https://github.com/OISF/suricata/releases/tag/suricata-7.0.17
- https://github.com/OISF/suricata/releases/tag/suricata-8.0.6
- https://redmine.openinfosecfoundation.org/issues/8558
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.