DragonFlyBSD CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH DragonFlyBSD CVE published 2026-10-15

CVE-2026-110912

CVE-2026-110912 is a high-severity vulnerability in DragonFly BSD, allowing an unauthenticated attacker on the adjacent network to disclose up to roughly 250 bytes of kernel memory, including kernel pointers, using a single crafted ARP request. The vulnerability exists in the ARP input handlers arpintr() and in_arpinput() in DragonFly BSD, which do not validate hardware address length and protocol address [truncated]