PT-2026-4996 · Open Source · Suricata

Ashivb · Published 2026-01-01 · Updated 2026-01-27 · CVE-2026-22264

Positive Technologies (AI Summary)

CVSS v3.1

9.4

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 8.0.3 Suricata versions prior to 7.0.14

Description Suricata is a network IDS, IPS and NSM engine. An unsigned integer overflow can lead to a heap use-after-free condition when generating a large number of alerts for a single packet. To mitigate the issue, avoid running untrusted rulesets or running Suricata with less than 65536 signatures that can match on the same packet.

Recommendations Update to Suricata version 8.0.3 or later. Update to Suricata version 7.0.14 or later. Avoid running untrusted rulesets. Run Suricata with at least 65536 signatures that can match on the same packet.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2026-01034

CVE-2026-22264

GHSA-MQR8-M3M4-2HW5

OPENSUSE-SU-2026:10082-1

Affected Products

Suricata

References · 31

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22264.json · Exploit
• https://github.com/OISF/suricata/security/advisories/GHSA-mqr8-m3m4-2hw5 · Vendor Advisory
• https://github.com/OISF/suricata/commit/ac1eb394181530430fb7262969f423a1bf8f209b · Patch
• https://github.com/OISF/suricata/commit/549d7bf60616de8e54686a188196453b5b22f715 · Patch
• https://github.com/OISF/suricata/commit/5789a3d3760dbf33d93fc56c27bd9529e5bdc8f2 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-22264 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-22264 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-22264 · Security Note
• https://ubuntu.com/security/CVE-2026-22264 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-22264 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-22264 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10082-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01034 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-22264 · Vendor Advisory
• https://suse.com/security/cve/CVE-2025-64333 · Note