PT-2026-33860 · Openbsd · Openbsd

Published 2026-04-20 · Updated 2026-04-21 · CVE-2026-41285

Mitre

CVSS v3.1

4.3

Medium

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

In OpenBSD through 7.8, the slaacd and rad daemons have an infinite loop when they receive a crafted ICMPv6 Neighbor Discovery (ND) option (over a local network) with length zero, because of an "nd opt len * 8 - 2" expression with no preceding check for whether nd opt len is zero.

Fix

Weakness Enumeration

CWE-1284

Related Identifiers

CVE-2026-41285

Affected Products

Openbsd

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-41285 · Security Note
• https://github.com/openbsd/src/commit/086c5738bcd3c203bcc08d024fcf983cb409115f · Note
• https://rfc-editor.org/rfc/rfc4861#section-4.6 · Note
• https://openbsd.org/errata78.html · Note