CVE-2026-16515 | Zephyr Project up to 4.4.1 ICMPv6 Error subsys/net/ip/icmpv6.c net_icmpv6_send_error allocation of resources

September 18, 2026 Yanac

A vulnerability, which was classified as critical, has been found in Zephyr Project Zephyr up to 4.4.1. Affected is the function net_icmpv6_send_error of the file subsys/net/ip/icmpv6.c of the component ICMPv6 Error Handler. This manipulation causes allocation of resources.

This vulnerability is tracked as CVE-2026-16515. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More