Stack Overflow Vulnerability in Zephyr's Network Stack due to ICMP Ping

CVE-2026-1681

What is CVE-2026-1681?

The vulnerability arises when an ICMP ping is issued via the net ping shell command directed at a device's own IPv4 address. This results in the network stack recursively re-entering the input path on the same system work-queue stack. As the destination is identified as a local address, both the echo request and the resulting echo reply are processed inline before the ongoing frame is completed. This recursive processing leads to an excessive accumulation of nested input-path frames that ultimately surpass the limits of the work-queue stack, triggering a stack overflow.

References