CVE-2026-41285 Details
Description
In OpenBSD through 7.8, the slaacd and rad daemons have an infinite loop when they receive a crafted ICMPv6 Neighbor Discovery (ND) option (over a local network) with length zero, because of an "nd_opt_len * 8 - 2" expression with no preceding check for whether nd_opt_len is zero.
A denial-of-service vulnerability has been identified in OpenBSD versions through 7.8 within the slaacd and rad daemons. These daemons enter an infinite loop upon receiving a crafted ICMPv6 Neighbor Discovery message containing a zero-length option over the local network. The loop is triggered by an expression that calculates the option length without first verifying whether it is zero, causing the daemons to spin and do nothing.
Users can apply the source code patch available in the OpenBSD 7.8 errata to address this vulnerability. Instructions for applying the patch can be found in the OpenBSD 7.8 errata.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Apr 21, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/openbsd/src/commit/086c5738bcd3c203bcc08d024fcf983cb409115f | [email protected] | Patch |
| https://www.openbsd.org/errata78.html | [email protected] | ProductRelease Notes |
| https://www.rfc-editor.org/rfc/rfc4861#section-4.6 | [email protected] | Not Applicable |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-835 | Loop with Unreachable Exit Condition ('Infinite Loop') | [email protected] |
| CWE-1284 | Improper Validation of Specified Quantity in Input | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| openbsd openbsd | <= 7.8 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 24, 2026 | Initial Analysis | [email protected] |
| Apr 21, 2026 | New CVE Received | [email protected] |