CVE-2026-41285
In OpenBSD through 7.8, the slaacd and rad daemons have an infinite loop when they receive a crafted ICMPv6 Neighbor Discovery (ND) option (over a local network) with length zero, because of an "nd_opt_len * 8 - 2" expression with no preceding check for whether nd_opt_len is zero.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-41285?
CVE-2026-41285 is considered a critical vulnerability due to its potential to cause an infinite loop in key networking daemons.
How does CVE-2026-41285 affect OpenBSD systems?
CVE-2026-41285 affects OpenBSD systems running versions up to 7.8, specifically targeting the slaacd and rad daemons.
How do I fix CVE-2026-41285?
To mitigate CVE-2026-41285, update your OpenBSD system to the latest version that addresses this vulnerability.
What are the potential impacts of CVE-2026-41285?
The impact of CVE-2026-41285 includes service disruption due to the affected daemons entering an infinite loop.
Is CVE-2026-41285 exploitation easily detectable?
Exploitation of CVE-2026-41285 may lead to increased network traffic patterns or service unavailability, which can be monitored.