CVE-2026-14697

netipv6sendns in subsys/net/ip/ipv6nbr.c allocates a transmit netpkt for a Neighbor Solicitation. When it is called with a data packet pending on an unresolved neighbor and that neighbor's pendingqueue is already non-empty an NS is already outstanding, the function appends the data packet and...

EUVD-2026-68744

netipv6sendns in subsys/net/ip/ipv6nbr.c allocates a transmit netpkt for a Neighbor Solicitation. When it is called with a data packet pending on an unresolved neighbor and that neighbor's pendingqueue is already non-empty an NS is already outstanding, the function appends the data packet and...

CVE-2026-14697 IPv6 Neighbor Solicitation packet leak causes TX pool exhaustion denial of service

netipv6sendns in subsys/net/ip/ipv6nbr.c allocates a transmit netpkt for a Neighbor Solicitation. When it is called with a data packet pending on an unresolved neighbor and that neighbor's pendingqueue is already non-empty an NS is already outstanding, the function appends the data packet and...

CVE-2026-14697

CVE-2026-14697 is a packet-leak denial-of-service in Zephyr RTOS . The function net_ipv6_send_ns() in subsys/net/ip/ipv6_nbr.c permanently leaks a transmit net_pkt when called with a data packet pending on an unresolved neighbor whose pending_queue is already non-empty: it appends the data packet...

CVE-2026-14697 IPv6 Neighbor Solicitation packet leak causes TX pool exhaustion denial of service

netipv6sendns in subsys/net/ip/ipv6nbr.c allocates a transmit netpkt for a Neighbor Solicitation. When it is called with a data packet pending on an unresolved neighbor and that neighbor's pendingqueue is already non-empty an NS is already outstanding, the function appends the data packet and...

PT-2026-83972

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A memory leak occurs in the net ipv6 send ns function within subsys/net/ip/ipv6 nbr.c when allocating a transmit net pkt for a Neighbor Solicitation. If the...

UBUNTU-CVE-2025-39850

In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix NPD in arp,neighreduce when using nexthop objects When the "proxy" option is enabled on a VXLAN device, the device will suppress ARP requests and IPv6 Neighbor Solicitation messages if it is able to reply on behalf of...

CVE-2022-35926 Out-of-bounds read in IPv6 neighbor solicitation in Contiki-NG

Contiki-NG is an open-source, cross-platform operating system for IoT devices. Because of insufficient validation of IPv6 neighbor discovery options in Contiki-NG, attackers can send neighbor solicitation packets that trigger an out-of-bounds read. The problem exists in the module...

PT-2021-14385

Name of the Vulnerable Software and Affected Versions: Contiki-NG versions prior to 4.6 Description: The issue allows an attacker to perform a denial-of-service attack by triggering an infinite loop in the processing of IPv6 neighbor solicitation NS messages. This can effectively shut down the...

CVE-2021-21279: Loop with Unreachable Exit Condition

Contiki-NG is an open-source, cross-platform operating system for internet of things devices. In verions prior to 4.6, an attacker can perform a denial-of-service attack by triggering an infinite loop in the processing of IPv6 neighbor solicitation NS messages. This type of attack can effectively...