Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, a logic error during fragment reassembly can lead to failed reassembly for valid traffic. An attacker could craft packets to trigger this behavior.This issue has been addressed in 7.0.7.
https://redmine.openinfosecfoundation.org/issues/7067
https://lists.debian.org/debian-lts-announce/2025/03/msg00029.html
https://github.com/OISF/suricata/security/advisories/GHSA-mf6r-3xp2-v7xg