DHCP Down: High-Severity Stack Overflow Flaw Threatens to Paralyze Kea Networks

A critical vulnerability (CVE-2026-3608, CVSS 7.5) in the ISC Kea DHCP suite can be remotely triggered to cause a stack overflow in kea daemons (kea-ctrl-agent, kea-dhcp-ddns, kea-dhcp4, kea-dhcp6), forcing the daemons to exit and potentially causing complete DHCP service disruption. ISC recommends upgrading to patched releases and hardening API sockets with TLS and mutual authentication as an immediate mitigation; no active exploits have been reported.