CVE-2026-56099
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk34th percentile — higher than 34% of all known CVEs
Summary
A vulnerability in OpenBSD before commit 6a23123 (2026-06-18) in the mpls_do_error function within sys/netmpls/mpls_input.c allows remote attackers to disclose kernel stack memory by sending crafted MPLS frames with 16 labels and no Bottom-of-Stack bit set.
Risk Assessment
An attacker can access sensitive data from kernel memory, potentially leading to information disclosure and further attack escalation.
Recommendation
Immediately update OpenBSD to a version containing commit 6a23123 or later, which fixes this vulnerability.
Original NVD description (English source)
OpenBSD before commit 6a23123 (2026-06-18) contains an out-of-bounds read vulnerability in the mpls_do_error function within sys/netmpls/mpls_input.c that allows remote attackers to disclose kernel stack memory by sending crafted MPLS frames with 16 labels and no Bottom-of-Stack bit set.