Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: zephyrproject zephyr 4.3.2, 4.4.2 Clear all filters
TI-2026-13514 CVE-2026-16148

Kernel panic in the it82xx2 USB device controller driver via re-initialization of a busy delayable work item

Priority LOW 21

The ITE it82xx2 USB device-controller driver initialized its bus-suspend detection work with k_work_init_delayable(&priv->suspended_work, suspended_handler) inside it82xx2_enable() (the driver's .enable op) in drivers/us…

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.0023 Published 2026-09-14 Fixed in 4.3.2, 4.4.2 CWE-666
TI-2026-13318 CVE-2026-15893

Zephyr IPv6 Neighbor Discovery zero reachable time from crafted Router Advertisement causes assertion/DoS

Priority LOW 29

net_if_ipv6_calc_reachable_time() in subsys/net/ip/net_if.c derives a randomized ND reachable time from ipv6->base_reachable_time as min_reachable + sys_rand32_get() % (max_reachable - min_reachable), where min_reachable…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00326 Published 2026-09-14 Fixed in 4.3.2, 4.4.2 CWE-617