CVE-2026-121295 Security Advisory 0223
CriticalCVSS 9.2
- Published
- Updated
- Exploit status
- No public exploit known
Description
On affected platforms running Arista EOS configured as S-BFD peers, an unauthenticated attacker could send a crafted S-BFD PDU to an initiator device. This crafted PDU could cause the kernel on the initiator device to crash, resulting in an unexpected device reboot.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Arista Networks EOS | >= 4.36.0F, <= 4.36.2F | No fix listed |
| Arista Networks EOS | >= 4.35.0F, <= 4.35.6M | No fix listed |
| Arista Networks EOS | >= 4.34.0F, <= 4.34.8M | No fix listed |
| Arista Networks EOS | >= 4.33.0F, <= 4.33.10M | No fix listed |
| Arista Networks EOS | >= 4.32.0F, < 4.33.0F | 4.33.0F |
| Arista Networks EOS | >= 1.0.0, < 4.32.0F | 4.32.0F |
References
- www.arista.com vendor-advisory