CVE-2026-9054

An attacker sending tcp, il, rudp, rudp, or gre packets with a length less than the header size would trigger a kernel panic.

Score

CVSS 4.0 9.2 Critical

Status

Deferred - 1d66c9f9-fff2-411a-aa19-ca6312fa25e9

Published

2026-05-22

Last modified

2026-05-22

Weaknesses

CWE-130

Affected products

• 9front (9front)

References

• https://git.9front.org/plan9front/9front/70c97c334171c715df82774d1a47638abaca2db4/commit.html
• https://git.9front.org/plan9front/9front/7838d68969549f938cc8e80c0c2b4218cb12805c/commit.html
• https://git.9front.org/plan9front/9front/f86917b75e9562f90545b7e484dbdcd748236952/commit.html