Skip to content
OpenAdvisories
Medium USN-8550-1 1 CVE

libslirp vulnerability

Published Jul 15, 2026 · Updated Jul 15, 2026

Ecosystem: Ubuntu

Summary

It was discovered that libslirp incorrectly handled TCP urgent data. A
privileged attacker inside a guest VM could possibly use this issue to
obtain sensitive information from the host process memory.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS libslirp 4.6.1-1ubuntu0.2
Ubuntu · 24.04 LTS 24.04:LTS libslirp 4.7.0-1ubuntu3.1
Ubuntu · 26.04 LTS 26.04:LTS libslirp 4.9.1-1ubuntu1.1

Vulnerabilities 1

  • Medium 6.5
    CVE-2026-9539 Public exploit

    libslirp TCP URG OOB Read Information Leak

    An out-of-bounds heap read and integer underflow in the TCP urgent data handling (sosendoob) in freedesktop.org libslirp version before v4.9.2 on hypervisor host environments (e.g., QEMU) allows a privileged guest VM attacker (root or CAP_NET_RAW) to leak gig…

    Freedesktop libslirp libslirp libslirp Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2026-9539