PT-2026-54641 · Dhcpcd · Dhcpcd

Evverx · Published 2026-07-01 · Updated 2026-07-01 · CVE-2026-14258

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions dhcpcd (affected versions not specified)

Description A flaw exists in the IPv6 Neighbor Discovery Router Advertisement processing. A specially crafted IPv6 Router Advertisement containing a zero-length Neighbor Discovery option can bypass validation during packet storage. When the packet is later reparsed without adequate validation, the parser enters a non-advancing loop, which is a loop that fails to progress through the data. This can lead to excessive CPU consumption and a resulting denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Infinite Loop

Weakness Enumeration

CWE-835

Related Identifiers

CVE-2026-14258

Affected Products

Dhcpcd

References · 7

• 🔥 https://github.com/NetworkConfiguration/dhcpcd/issues/415 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-14258 · Security Note
• https://github.com/NetworkConfiguration/dhcpcd/commit/75289ca · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2462305 · Note
• https://access.redhat.com/security/cve/CVE-2026-14258 · Note
• https://t.me/cveNotify/182244 · Telegram Post
• https://t.me/CVEtracker/58565 · Telegram Post