Upstream information

CVE-2026-22261 at MITRE

Description

Suricata is a network IDS, IPS and NSM engine. Prior to versions 8.0.3 and 7.0.14, various inefficiencies in xff handling, especially for alerts not triggered in a tx, can lead to severe slowdowns. Versions 8.0.3 and 7.0.14 contain a patch. As a workaround, disable XFF support in the eve configuration. The setting is disabled by default.

SUSE information

Overall state of this security issue: Does not affect SUSE products

SUSE Bugzilla entry: 1257375 [NEW]

No SUSE Security Announcements cross referenced.

List of released packages

Product(s) Fixed package version(s) References
openSUSE Tumbleweed
  • libsuricata8_0_3 >= 8.0.3-1.1
  • suricata >= 8.0.3-1.1
  • suricata-devel >= 8.0.3-1.1
 Patchnames:
openSUSE-Tumbleweed-2026-10082

SUSE Timeline for this CVE

CVE page created: Fri Jan 23 01:50:57 2026
CVE page last modified: Wed Jan 28 13:00:43 2026