CVE-2026-114408
Received Received - Intake

Eclipse ThreadX NetX Duo IPv6 Path MTU ICMPv6 NULL Pointer Dereference

Publication date: 2026-11-02

Last updated on: 2026-11-02

Assigner: Eclipse Foundation

Description
In Eclipse ThreadX NetX Duo versions 6.4.5.202504 through 6.5.2.202603a, built with IPv6 path MTU discovery, the ICMPv6 Packet Too Big handler uses the destination-table entry it adds without checking that the add succeeded. A sender on the network can fill the destination table with Packet Too Big messages quoting new destinations, after which the next message makes the IP helper thread dereference a NULL pointer, crashing it on targets that fault on address 0 and stopping all network processing.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-02
Last Modified
2026-11-02
Generated
2026-11-02
AI Q&A
2026-11-02
EPSS Evaluated
N/A
NVD
CVE-2026-114408

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Eclipse Foundation Eclipse ThreadX 6.4.5

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-476 The product dereferences a pointer that it expects to be valid but is NULL.
CWE-252 The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects Eclipse ThreadX NetX Duo versions 6.4.5.202504 through 6.5.2.202603a when built with IPv6 path MTU discovery. The ICMPv6 Packet Too Big handler adds a destination-table entry without verifying if the addition succeeded. An attacker can exploit this by flooding the destination table with Packet Too Big messages for new destinations, causing the IP helper thread to dereference a NULL pointer and crash, halting all network processing.

Detection Guidance

Detecting this vulnerability requires monitoring for crashes in the IP helper thread or network processing halts in Eclipse ThreadX NetX Duo systems. Check logs for NULL pointer dereference errors or thread crashes. Use network traffic analysis tools like tcpdump or Wireshark to inspect ICMPv6 Packet Too Big messages for unusual patterns or flooding attempts targeting the destination table.

Impact Analysis

This vulnerability can cause network outages by crashing the IP helper thread, stopping all network processing. Systems relying on Eclipse ThreadX NetX Duo for network operations may lose connectivity, leading to service disruptions or downtime.

Compliance Impact

This vulnerability causes a denial of service by crashing the IP helper thread, halting all network processing. For GDPR, this could impact availability of data processing systems, potentially violating Article 32 requirements for resilience. For HIPAA, it may disrupt critical healthcare systems, affecting integrity and availability of protected health information.

Mitigation Strategies

Upgrade Eclipse ThreadX NetX Duo to a version later than 6.5.2.202603a where the ICMPv6 Packet Too Big handler issue is resolved.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-114408. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...