Issues

• MQTT contains many check_pointer calls without claiming them first

  CHERIoT-Platform/network-stack#118 · Filter by author resistor opened on Aug 10, 2026

• UDP host access can be added after socket close

  CHERIoT-Platform/network-stack#115 · Filter by author nding0405 opened on Aug 7, 2026

• SmallTable copies too few bytes when removing an item

  CHERIoT-Platform/network-stack#114 · Filter by author nding0405 opened on Aug 7, 2026
  1

• SmallTable can store the same rule more than once

  CHERIoT-Platform/network-stack#113 · Filter by author nding0405 opened on Aug 7, 2026

• UDP close removes only one firewall rule

  CHERIoT-Platform/network-stack#112 · Filter by author nding0405 opened on Aug 7, 2026

• Active TCP termination cannot send out final ACK.

  CHERIoT-Platform/network-stack#110 · Filter by author nding0405 opened on Jul 27, 2026
  1

• Race condition in network_socket_close in reset scenario

  CHERIoT-Platform/network-stack#104 · Filter by author nding0405 opened on Jul 18, 2026
  1

• Network APIs should use the new Timeout API

  CHERIoT-Platform/network-stack#99 · Filter by author hlef opened on Jul 10, 2026

• Sockets are overly difficult to close when a network stack reset happens

  CHERIoT-Platform/network-stack#98 · Filter by author hlef opened on Jul 10, 2026
  2

• SmallTable::insert() keeps a dangling capability to the freed buffer after resizing

  CHERIoT-Platform/network-stack#97 · Filter by author nding0405 opened on Jul 10, 2026

• packet_filter_ipv4 in firewall.cc allows a packet with an invalid IHL to bypass the firewall filter.

  CHERIoT-Platform/network-stack#96 · Filter by author nding0405 opened on Jul 10, 2026
  1

• DNS resolver security

  CHERIoT-Platform/network-stack#95 · Filter by author hlef opened on Jul 3, 2026

• Use user permissions on sockets

  enhancement
  Feature

  CHERIoT-Platform/network-stack#91 · Filter by author hlef opened on Jun 25, 2026
  

• Timeout weirdness in mqtt_run loop

  CHERIoT-Platform/network-stack#81 · Filter by author rmn30 opened on Feb 4, 2026
  2

• Make API TLS Implementation agnostic

  CHERIoT-Platform/network-stack#76 · Filter by author rmn30 opened on Nov 11, 2025
  1

• SNTP hard-codes pool.ntp.org

  CHERIoT-Platform/network-stack#58 · Filter by author nwf opened on Jan 31, 2025

• MQTT documentation frets about UAF/UAR

  CHERIoT-Platform/network-stack#57 · Filter by author nwf opened on Jan 8, 2025
  2

• Missing API: Get the local address for bound sockets

  good first issue
  CHERIoT-Platform/network-stack#55 · Filter by author davidchisnall opened on Dec 31, 2024

• Put the device MAC address into a pre-shared read-only variable in the firewall

  good first issue
  CHERIoT-Platform/network-stack#52 · Filter by author hlef opened on Nov 19, 2024

• The firewall does not support IEEE 802.1Q VLAN tagging

  enhancement
  CHERIoT-Platform/network-stack#51 · Filter by author hlef opened on Nov 18, 2024

• Network stack reset can be used as a system-scale DoS vector

  good first issue
  CHERIoT-Platform/network-stack#47 · Filter by author hlef opened on Oct 28, 2024

• Connection capabilities allow compartments to open an unlimited number of TCP connections

  CHERIoT-Platform/network-stack#45 · Filter by author hlef opened on Oct 22, 2024
  2

• Make the network stack API multiwaiter-compatible

  CHERIoT-Platform/network-stack#44 · Filter by author hlef opened on Oct 18, 2024
  3

• Race-condition in socket close

  CHERIoT-Platform/network-stack#40 · Filter by author hlef opened on Oct 9, 2024

• Network Stack Reset limitations

  CHERIoT-Platform/network-stack#31 · Filter by author hlef opened on Aug 13, 2024
  2