Memory Leak DoS in µD3TN BPv6 EID Reference Handling

Executive Summary

CVE-2026-121512 is a memory leak vulnerability in the µD3TN BPv6 implementation. It occurs when the function bundle_block_free incorrectly frees EID reference lists in BPv6 blocks, causing memory leaks. Each block with multiple EID references leaks nodes and strings, up to 32 KiB each. Attackers can exploit this by sending crafted bundles to exhaust system memory.

Useful 0 Not Useful 0

Detection Guidance

Monitor memory usage on the µD3TN system for unexpected spikes. Check for processes consuming excessive memory without clear cause. Inspect logs for bundle processing errors or crashes. Use system monitoring tools like top, htop, or ps to track memory consumption by the µD3TN process.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows unauthenticated remote attackers to cause a denial of service by consuming all available memory on the affected system. A short burst of malicious bundles can permanently exhaust memory, leading to termination of the µD3TN process and halting all bundle processing.

Useful 0 Not Useful 0

Mitigation Strategies

Apply the official patch from µD3TN to fix the memory leak in bundle_block_free. Update to the latest version that includes the remediation. Implement memory limits or monitoring to detect abnormal usage. Restrict network access to µD3TN instances if possible until patched.

Useful 0 Not Useful 0