THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-10634 (MEDIUM 4.8) — Zephyr's native TCP stack iterates the global connection list in net_tcp_foreach() (subsys/net/ip/tcp.c) using the SYS_SLIST_FOR_EACH_CONTAINER_SAFE macro, which caches a pointer to the next list node. Prior to this fix the function released tcp_lock while invoking the per-connec

[NVD] CVE-2026-10634 (MEDIUM 4.8) — Zephyr's native TCP stack iterates the global connection list in net_tcp_foreach() (subsys/net/ip/tcp.c) using the SYS_SLIST_FOR_EACH_CONTAINER_SAFE macro, which caches a pointer to the next list node. Prior to this fix the function released tcp_lock while invoking the per-connec

lownvdPublished 2026-06-15

CVE-2026-10634 CVSS: 4.8 MEDIUM Published: 2026-06-15T16:16:32.223

Zephyr's native TCP stack iterates the global connection list in net_tcp_foreach() (subsys/net/ip/tcp.c) using the SYS_SLIST_FOR_EACH_CONTAINER_SAFE macro, which caches a pointer to the next list node. Prior to this fix the function released tcp_lock while invoking the per-connection callback and re-acquired it afterwards.

During

Indicators of compromise

CVE-2026-10634cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-10634