Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-31932

Fixed in a distro release EPSS <1%CVSS 7.5

Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, inefficiency in KRB5 buffering can lead to performance degradation. This issue has been patched in versions 7.0.15 and 8.0.4.

Published 2026-04-02 · CVE record · OSV

Products: OISF suricata

Distro releases

ReleasePackageFixed in
Debian 13suricata1:7.0.10-1+deb13u4
Debian 14suricata1:8.0.4-1
Ubuntu 16.04 LTSsuricatano fix
Ubuntu 18.04 LTSsuricatano fix
Ubuntu 22.04 LTSsuricatano fix
Ubuntu 24.04 LTSsuricatano fix
Ubuntu 25.10suricatano fix
Ubuntu 26.04 LTSsuricatano fix
Ubuntu 26.10suricatano fix
openSUSE Tumbleweedsuricata8.0.4-1.1