CVE-2023-52556: OpenBSD

Medium severity, CVSS 6.2. EPSS: 0.1% chance of exploitation in the next 30 days.

In OpenBSD 7.4 before errata 009, a race condition between pf(4)'s processing of packets and expiration of packet states may cause a kernel panic.

Affected products

• OpenBSD OpenBSD: before 7.4 (fixed in 7.4); version 7.4 only

Published 2024-03-01. Last modified 2026-06-17.