DHCPv4 Client Vulnerability in Zephyr's Networking Stack

CVE-2026-79980

What is CVE-2026-79980?

The DHCPv4 client in Zephyr's networking stack incorrectly manages its transaction identifier, maintaining it as a predictable counter instead of a random value per transaction. This flaw allows attackers to predict future identifiers, leading to the potential for forged DHCP replies that can redirect network traffic to attacker-controlled addresses. By exploiting this vulnerability, an attacker can compromise the device's network configurations and manipulate its interactions on the network. The issue has been addressed by generating a new random identifier for each transaction state, enhancing the security of DHCP interactions and ensuring compliance with relevant standards.

References