Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2026-9054
PUBLISHED
More InfoOfficial Page
Assigner-9front
Assigner Org ID-1d66c9f9-fff2-411a-aa19-ca6312fa25e9
View Known Exploited Vulnerability (KEV) details
Published At-22 May, 2026 | 03:21
Updated At-22 May, 2026 | 17:15
Rejected At-
▼CVE Numbering Authority (CNA)
Invalid IP packets cause a kernel panic

An attacker sending tcp, il, rudp, rudp, or gre packets with a length less than the header size would trigger a kernel panic.

Affected Products
Vendor
9front
Product
9front
Package Name
kernel
Repo
https://git.9front.org/plan9front/9front/HEAD/info.html
Modules
  • networking stack
Program Files
  • /sys/src/9/ip/il.c
  • /sys/src/9/ip/rudp.c
  • /sys/src/9/ip/udp.c
  • /sys/src/9/ip/gre.c
  • /sys/src/9/ip/tcp.c
  • /sys/src/9/port/qio.c
Program Routines
  • udpiput()
  • tcpiput()
  • rdpiput()
  • ilpullup()
  • greiput()
  • trimblock()
Platforms
  • x86
  • ARM
  • 64 bit
  • 32 bit
Default Status
unaffected
Versions
Affected
  • From 863431cff8b47fa20625f4cbee3ea4e92367b152 before 70c97c334171c715df82774d1a47638abaca2db4 (git)
Metrics
VersionBase scoreBase severityVector
4.09.2CRITICAL
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:A/AU:Y/R:A
Version: 4.0
Base score: 9.2
Base severity: CRITICAL
Vector:
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:A/AU:Y/R:A
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://git.9front.org/plan9front/9front/7838d68969549f938cc8e80c0c2b4218cb12805c/commit.html
mitigation
https://git.9front.org/plan9front/9front/f86917b75e9562f90545b7e484dbdcd748236952/commit.html
mitigation
https://git.9front.org/plan9front/9front/70c97c334171c715df82774d1a47638abaca2db4/commit.html
mitigation
Hyperlink: https://git.9front.org/plan9front/9front/7838d68969549f938cc8e80c0c2b4218cb12805c/commit.html
Resource:
mitigation
Hyperlink: https://git.9front.org/plan9front/9front/f86917b75e9562f90545b7e484dbdcd748236952/commit.html
Resource:
mitigation
Hyperlink: https://git.9front.org/plan9front/9front/70c97c334171c715df82774d1a47638abaca2db4/commit.html
Resource:
mitigation
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Problem Types
TypeCWE IDDescription
CWECWE-130CWE-130 Improper Handling of Length Parameter Inconsistency
Type: CWE
CWE ID: CWE-130
Description: CWE-130 Improper Handling of Length Parameter Inconsistency
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
Details not found