Security update for radvd
A security update for radvd addresses CVE-2026-48715, which involves a stack-based buffer overflow triggered by crafted ICMPv6 Router Advertisements. The update includes version 2.21 with multiple improvements and fixes. This vulnerability is rated as high severity due to the potential impact of a buffer overflow.
AI Analysis
Technical Summary
CVE-2026-48715 is a vulnerability in radvd where a crafted ICMPv6 Router Advertisement packet can cause a stack-based buffer overflow. This issue is fixed in radvd version 2.21, which also introduces additional features and improvements such as RFC8319 support, DHCPv6-PD preferred flag, and better handling of jumbo packets. The vulnerability could allow an attacker to cause memory corruption by sending malicious ICMPv6 Router Advertisements to a vulnerable radvd instance.
Potential Impact
The vulnerability allows a crafted ICMPv6 Router Advertisement to trigger a stack-based buffer overflow in radvd, potentially leading to memory corruption. This could result in denial of service or other unpredictable behavior depending on exploitation, but no known exploits in the wild have been reported.
Mitigation Recommendations
Upgrade radvd to version 2.21 or later, which contains the fix for CVE-2026-48715. No other mitigation steps are indicated by the vendor advisory.
Security update for radvd
Description
A security update for radvd addresses CVE-2026-48715, which involves a stack-based buffer overflow triggered by crafted ICMPv6 Router Advertisements. The update includes version 2.21 with multiple improvements and fixes. This vulnerability is rated as high severity due to the potential impact of a buffer overflow.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-48715 is a vulnerability in radvd where a crafted ICMPv6 Router Advertisement packet can cause a stack-based buffer overflow. This issue is fixed in radvd version 2.21, which also introduces additional features and improvements such as RFC8319 support, DHCPv6-PD preferred flag, and better handling of jumbo packets. The vulnerability could allow an attacker to cause memory corruption by sending malicious ICMPv6 Router Advertisements to a vulnerable radvd instance.
Potential Impact
The vulnerability allows a crafted ICMPv6 Router Advertisement to trigger a stack-based buffer overflow in radvd, potentially leading to memory corruption. This could result in denial of service or other unpredictable behavior depending on exploitation, but no known exploits in the wild have been reported.
Mitigation Recommendations
Upgrade radvd to version 2.21 or later, which contains the fix for CVE-2026-48715. No other mitigation steps are indicated by the vendor advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- SUSE Product Security Team
- Advisory Id
- openSUSE-SU-2026:21400-1
- Cve Count
- 1
- State
- PUBLISHED
Threat ID: 6aab496955bf5e2cf5990d0e
Added to database: 09/17/2026, 01:59:05 UTC
Last enriched: 09/17/2026, 02:11:58 UTC
Last updated: 09/17/2026, 02:11:58 UTC
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.