CVE-2026-41285
MEDIUM
NVD
CVSS Score
4.3
Severity
MEDIUM
Published
Apr 21, 2026
Vendor
unknown
Description
In OpenBSD through 7.8, the slaacd and rad daemons have an infinite loop when they receive a crafted ICMPv6 Neighbor Discovery (ND) option (over a local network) with length zero, because of an "nd_opt_len * 8 - 2" expression with no preceding check for whether nd_opt_len is zero.