A NULL pointer dereference occurs in Roy Marples NetworkConfiguration/dhcpcd 10.3.0 while parsing configuration options. In parse_option() (src/if-options.c:1886), the code performs a member access on a NULL pointer of type 'struct dhcp_opt' when an unexpected/invalid option token or parsing state causes the lookup to yield NULL. The instrumented fuzzing build reports 'runtime error: member access within null pointer of type struct dhcp_opt' and aborts.
History

Mon, 15 Jun 2026 19:30:00 +0000

Type Values Removed Values Added
Description A NULL pointer dereference occurs in Roy Marples NetworkConfiguration/dhcpcd 10.3.0 while parsing configuration options. In parse_option() (src/if-options.c:1886), the code performs a member access on a NULL pointer of type 'struct dhcp_opt' when an unexpected/invalid option token or parsing state causes the lookup to yield NULL. The instrumented fuzzing build reports 'runtime error: member access within null pointer of type struct dhcp_opt' and aborts.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-06-15T18:52:37.376Z

Reserved: 2026-01-09T00:00:00.000Z

Link: CVE-2025-70102

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-06-15T20:16:24.827

Modified: 2026-06-15T20:16:24.827

Link: CVE-2025-70102

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.