Out-of-Bounds Write Vulnerability in Zephyr IP Socket Implementation

CVE-2026-10643

What is CVE-2026-10643?

A flaw in Zephyr's IP socket recvmsg() allows for an out-of-bounds write due to inadequate validation of user-supplied ancillary buffer sizes. This vulnerability occurs when the buffer's length checks only account for the payload without considering the control message header, leading to potential memory corruption in the kernel heap. Triggerable by an unprivileged userspace thread, this flaw can have severe implications for system stability and security.

References