CVE-2026-1681
EUVD-2026-2938712.05.2026, 07:16
Issuing an ICMP ping via the `net ping` shell command to a device's own IPv4 address causes the network stack to recursively re-enter the input path on the same system work-queue stack. Because the destination is recognized as a local address, both the echo request and the resulting echo reply are processed inline before the current frame returns. The nested input-path frames exceed the work-queue stack and trigger a stack overflow.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| zephyrproject | zephyr | 𝑥 ≤ 4.3.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-674 - Uncontrolled RecursionThe product does not properly control the amount of recursion which takes place, consuming excessive resources, such as allocated memory or the program stack.
- CWE-787 - Out-of-bounds WriteThe software writes data past the end, or before the beginning, of the intended buffer.