CVE-2026-10637 | zephyrproject zephyr up to 4.4.x Packet Interface subsys/net/ip/ipv6_mld.c mld_send use after free (GHSA-m23w-34pp-4h92)

A vulnerability classified as critical was found in zephyrproject zephyr up to 4.4.x. Affected by this issue is the function mld_send of the file subsys/net/ip/ipv6_mld.c of the component Packet Interface. Executing a manipulation can lead to use after free.

This vulnerability is registered as CVE-2026-10637. The attack requires access to the local network. No exploit is available.

Upgrading the affected component is advised.