CVE-2026-19577

The Zephyr RTOS contains an out-of-bounds read vulnerability in the IPv6 route forwarding logic within subsys/net/ip/route_ipv6.c. The net_route_ipv6_packet() function calls net_nbr_get_lladdr() without verifying if a neighbor cache entry has a linked link-layer address. When a neighbor is unreso...