Skip to content
OpenAdvisories
High · 8.6 CVE-2026-121295 EUVD-2026-122816GHSA-328w-w3mm-pwh5

Security Advisory 0223

Published Nov 10, 2026 · Updated Nov 13, 2026 · Assigned by Arista

Description

On affected platforms running Arista EOS configured as S-BFD peers, an unauthenticated attacker could send a crafted S-BFD PDU to an initiator device. This crafted PDU could cause the kernel on the initiator device to crash, resulting in an unexpected device reboot.

Affected products

VendorProductAffectedFixed
Arista Networks EOS 4.36.0F – ≤ 4.36.2F, 4.35.0F – ≤ 4.35.6M, 4.34.0F – ≤ 4.34.8M, 4.33.0F – ≤ 4.33.10M, 4.32.0F – < 4.33.0F, 1.0.0 – < 4.32.0F 4.33.0F

Advisories 1

References