The vulnerability in Zephyr RTOS arises when the `net ping` shell command is used to ping the device's own IPv4 address. The network stack recursively re-enters the input processing path on the same system work-queue stack because the destination is recognized as local. Both the ICMP echo request and echo reply are processed inline before returning from the current frame, causing nested input-path frames to exceed the work-queue stack size and trigger a stack overflow. This can lead to denial of service due to stack corruption or crash. The CVSS 3.1 base score is 6.1 (medium severity) with attack vector local, low complexity, no privileges required, user interaction required, unchanged scope, no confidentiality impact, low integrity impact, and high availability impact.

Successful exploitation results in a stack overflow in the network stack work-queue, potentially causing denial of service by crashing or destabilizing the affected device. There is no indication of confidentiality or significant integrity impact. The attack requires local access and user interaction, limiting remote exploitation potential. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid using the `net ping` command to ping the device's own IPv4 address to prevent triggering the stack overflow. Monitor vendor communications for updates on patches or workarounds.