CVE-2026-10636 | zephyrproject zephyr up to 4.4.x Network Interface subsys/net/ip/igmp.c igmp_send use after free (GHSA-fj6q-975v-65c9)

A vulnerability classified as critical has been found in zephyrproject zephyr up to 4.4.x. Affected by this vulnerability is the function igmp_send of the file subsys/net/ip/igmp.c of the component Network Interface. Performing a manipulation results in use after free.

This vulnerability is cataloged as CVE-2026-10636. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.