CVE-2026-14258
MEDIUM
MEDIUM
Priority: 0.03
BB Relevance:
58/100
Published: 2026-07-01
Modified: 2026-10-25
First seen: 2026-10-29
Status: active
Attack Surface
Adjacent
Low Complexity
No Auth
No Interaction
CVSS Vector Breakdown
AV:
Adjacent
AC:
Low
PR:
None
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
A flaw was found in dhcpcd's IPv6 Neighbor Discovery Router Advertisement processing. A specially crafted IPv6 Router Advertisement containing a zero-length Neighbor Discovery option can bypass validation during packet storage and later be reparsed without adequate validation, causing the parser to enter a non-advancing loop. Successful exploitation may result in excessive CPU consumption, leading to a denial of service.