CVE-2026-79976 | Zephyr Project up to 4.4.2 MCTP-over-I2C+GPIO target binding mctp_i2c_gpio_target.c mctp_i2c_gpio_target_stop reg_addr/rxtx null pointer dereference

October 21, 2026 Yanac

A vulnerability classified as critical was found in Zephyr Project Zephyr up to 4.4.2. The impacted element is the function mctp_i2c_gpio_target_stop of the file subsys/pmci/mctp/mctp_i2c_gpio_target.c of the component MCTP-over-I2C+GPIO target binding. Such manipulation of the argument reg_addr/rxtx leads to null pointer dereference.

This vulnerability is referenced as CVE-2026-79976. The attack needs to be initiated within the local network. No exploit is available.VulDB Recent EntriesRead More