important · Embedded — Zephyr
One adjacent IPv6 packet can turn every affected Zephyr node on a link into a reflector.
Affects
Zephyr RTOS IPv6 networking, used by embedded and constrained devices including mesh-network nodes.
A link-local attacker sends an unrecognized next-header packet to ff02::1 with a spoofed victim source, and missing suppression checks make each affected node return an ICMPv6 error to the victim.
Detail and 1 source
The upstream fix adds the missing checks at the shared error-sending path.