CVE-2026-15813
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
Vulnerability in the network packet de-fragmentation engine of kronosnet (versions <= 1.34). The reassembly code does not properly validate sequence numbers of fragments, allowing an attacker to send malformed packets. This can lead to out-of-bounds memory access or heap corruption, causing application crashes or system instability.
Risk Assessment
Risk includes application crashes or system instability, potentially disrupting network services using kronosnet.
Recommendation
Update kronosnet to version 1.35 or later, which contains the fix.
Other vulnerabilities in kronosnet
See all- CVE-2026-15812Medium
In the ACL subsystem of kronosnet (versions <= 1.34), when configured for dynamic links without encryption, the validation trusts the link ID from packets. A remote unauthenticated attacker can spoof the link ID and bypass ACL, injecting arbitrary packets into the application layer.
- CVE-2026-15811Medium
In kronosnet (version <=1.34), the framework does not wipe sensitive memory after cryptographic configuration changes, leaving encryption keys in memory. A local attacker can retrieve them to decrypt cluster communications or inject malicious packets.
Original NVD description (English source)
A vulnerability was found in the network packet de-fragmentation engine of kronosnet (Version affected <= 1.34). The internal reassembly code does not properly validate sequence numbers of incoming payload fragments. An attacker can exploit this lack of verification by transmitting malformed packets with corrupted sequence parameters. Under specific conditions, this forces the packet processing layer to parse data outside the designated bounds of the internal memory structures, causing an out-of-bounds memory access or heap corruption. This behavior can result in sudden application crashes or system instability.