ARP Input Handler Vulnerability in DragonFly BSD by The DragonFly BSD Project

CVE-2026-110912

What is CVE-2026-110912?

In DragonFly BSD versions up to 6.4.2, an existing vulnerability in the ARP input handling functions allows an unauthenticated attacker on the adjacent network to craft ARP requests with fabricated hardware and protocol address lengths. This exploitation results in memory access violations, enabling the attacker to retrieve sensitive kernel memory data, including kernel pointers. This vulnerability is set to be addressed in the upcoming stable release, version 6.6.

References