Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-99924.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-99924
Upstream
Published
2026-09-05T19:16:56Z
Modified
2026-09-12T05:27:53Z
Summary
CVE-2026-6554 affecting package nmap 7.95-5
Details

libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. In particular uncommon use cases a crafted filter program can cause the interpreter to loop infinitely.

References

Affected packages

Azure Linux:3 / nmap

Package

Name
nmap
Purl
pkg:rpm/azure-linux/nmap

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Last Affected
7.95-5

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-99924.json"