CVE-2026-18415

The Zephyr RTOS (implied by CONFIG_NET_L2_IEEE802154_FRAGMENT and zsock_socket()) contains an out-of-bounds write vulnerability in the ieee802154_send() function within subsys/net/l2/ieee802154/ieee802154.c. When CONFIG_NET_L2_IEEE802154_FRAGMENT is enabled, the system fails to perform length val...