CVE-2026-7656 Broken IPv6 Neighbor Discovery input validation allows spoofed RA/NS/NA acceptance in Zephyr net stack

The IPv6 Neighbor Discovery handlers in subsys/net/ip/ipv6nbr.c handlerainput, handlensinput, handlenainput used an incorrect boolean expression that combined the RFC 4861 validity checks with the ICMPv6 code check using the wrong operator precedence: the form was length/hop/source/target checks ...

libndp security update

1.2-6 - libndp: fix hop limit validation CVE-2016-3698 1.2-5 - libndp: validate the IPv6 hop limit CVE-2016-3698 - libndb: reject redirect and router advertisements from non-link-local CVE-2016-3698...