2 matches found
CVE-2026-80603 netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackirc: fix parsedcc off-by-one OOB read parsedcc treats dataend as an inclusive end pointer, but its only caller passes datalimit = ibptr + datalen, which points one past the last valid byte. The newline searc...
9.1CVSS0.00425EPSS
SaveExploits0References8
CVE-2026-80603
An off-by-one out-of-bounds read in the Linux kernel's netfilter nf_conntrack_irc module affects the parse_dcc() function. The function treats data_end as an inclusive bound, but its caller passes an exclusive end pointer (ib_ptr + datalen). The newline search loop iterates with
9.1CVSS5.8AI score0.00425EPSS
SaveExploits0References8
20