CVE-2026-7424 Details
Description
Integer underflow in the DHCPv6 sub-option parser in FreeRTOS-Plus-TCP before V4.4.1 and V4.2.6 allows an adjacent network actor to corrupt the device's IPv6 address assignment, DNS configuration, and lease times, and to cause a denial of service (permanent IP task freeze requiring hardware reset) by sending a single crafted DHCPv6 packet. The issue is present whenever DHCPv6 is enabled. To mitigate this issue, users should upgrade to version V4.2.6 or V4.4.1 or newer.
An integer underflow vulnerability has been identified in the DHCPv6 sub-option parser of FreeRTOS-Plus-TCP versions 4.0.0 through 4.2.5 and 4.3.0 through 4.4.0. This vulnerability allows an adjacent network actor to corrupt the device's IPv6 address assignment, DNS configuration, and lease times. Additionally, it can cause a denial-of-service condition by permanently freezing the IP task, requiring a hardware reset. The issue arises whenever DHCPv6 is enabled, as a single crafted DHCPv6 packet can trigger the problem.
Users are advised to upgrade to FreeRTOS-Plus-TCP version 4.4.1 or 4.2.6. For those unable to upgrade immediately, DHCPv6 can be disabled by setting ipconfigUSE_DHCPv6 to 0 in the FreeRTOSIPConfig.h configuration file, although this will require manual IPv6 address configuration.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Apr 29, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://aws.amazon.com/security/security-bulletins/2026-022-aws/ | AMZN | Vendor Advisory |
| https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/releases/tag/V4.2.6 | AMZN | Release Notes |
| https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/releases/tag/V4.4.1 | AMZN | Release Notes |
| https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/security/advisories/GHSA-wrhm-c99p-2p8g | AMZN | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-191 | Integer Underflow (Wrap or Wraparound) | AMZN |
Affected Products
| Product | Versions |
|---|---|
| amazon freertos-plus-tcp | >= 4.0.0, < 4.2.6 >= 4.3.0, < 4.4.1 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | AMZN |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 4, 2026 | Initial Analysis | [email protected] |
| Apr 29, 2026 | CVE Modified | AMZN |
| Apr 29, 2026 | New CVE Received | AMZN |