CVE-2026-10638

CVE-2026-10638 affects Zephyr Networking: ICMPv6 RX path can use a freed net_pkt when updating statistics after sending an echo reply or error. The code reads iface pointers post-send in icmpv6_handle_echo_request() and net_icmpv6_send_error(); if no TX queue or driver/L2 frees the packet, net_pk...