CVE-2026-11811

Name of the Vulnerable Software and Affected Versions UpdateHub (affected versions not specified)

Description The over-the-air update client contains a resource leak in the start coap client() function within subsys/mgmt/updatehub/updatehub.c. When a connection to the UpdateHub server fails during setup—which can occur naturally if the server is unreachable or be triggered by a network attacker disrupting traffic—the CoAP/DTLS socket descriptor is leaked. This happens because the cleanup process is gated by a flag that is not correctly set when zsock setsockopt() or zsock connect() fails, preventing cleanup connection() from being called. The leaked descriptor remains in the socket pool until a reboot. Repeated failures, driven by the autohandler() poll, the updatehub probe()/updatehub update() API, or the updatehub run shell command, can exhaust the shared socket pool, leading to a device-wide denial-of-service where networking degrades.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.