CVE-2026-15893 | ZephyrProject Zephyr up to 4.4.1 Neighbor Discovery subsys/net/ip/net_if.c net_if_ipv6_calc_reachable_time base_reachable_time denial of service

September 14, 2026 Yanac

A vulnerability was found in ZephyrProject Zephyr up to 4.4.1 and classified as critical. This affects the function net_if_ipv6_calc_reachable_time of the file subsys/net/ip/net_if.c of the component Neighbor Discovery. The manipulation of the argument base_reachable_time results in denial of service.

This vulnerability is known as CVE-2026-15893. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More