VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Apr 21, 2026· Updated Apr 24, 2026

CVE-2026-41285

CVE-2026-41285

Description

In OpenBSD through 7.8, the slaacd and rad daemons have an infinite loop when they receive a crafted ICMPv6 Neighbor Discovery (ND) option (over a local network) with length zero, because of an "nd_opt_len * 8 - 2" expression with no preceding check for whether nd_opt_len is zero.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • OpenBSD/OpenBSD2 versions
    cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:openbsd:openbsd:*:*:*:*:*:*:*:*range: <=7.8
    • (no CPE)range: <=7.8

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.