AIKIDO-2026-10087

TL;DR

Affected versions of Eclipse ThreadX NetX Duo contain a denial-of-service (DoS) weakness in how ICMPv6 PACKET_TOO_BIG events are handled: when processing a message, the stack may not correctly trigger necessary neighbor discovery (ND) resend logic, which can lead to improper handling of network conditions and cause the system to become unresponsive under certain malformed or high-load IPv6 traffic patterns. The patch fixes this by ensuring that when a new ND cache entry is created during PACKET_TOO_BIG processing, an ND request is sent and retry state is initialized so that the protocol doesn’t stall, mitigating the DoS condition.