CVE-2026-79980 | Zephyr Project up to 4.4.x DHCPv4 Client dhcpv4.c dhcpv4_start_internal random values

October 23, 2026 Yanac

A vulnerability identified as problematic has been detected in Zephyr Project Zephyr up to 4.4.x. The impacted element is the function dhcpv4_start_internal of the file subsys/net/lib/dhcpv4/dhcpv4.c of the component DHCPv4 Client. Performing a manipulation results in insufficiently random values.

This vulnerability is known as CVE-2026-79980. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More