---
id: "CVE-2026-121369"
page: "https://infrastack.ai/live/CVE-2026-121369"
kind: "vulnerability"
aliases: ["CVE-2026-121369"]
title: "Arista EOS: link-layer traffic can exhaust CPU and memory, forcing a reboot"
severity: "medium"
cvss: 6.7
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["arista-eos", "infrastructure", "network-gear"]
not_affected_if: ["default-config", "no-untrusted-direct-connectivity"]
published_at: "2026-11-10T20:18:56+00:00"
first_seen_at: "2026-11-10T20:46:04+00:00"
updated_at: "2026-11-10T20:48:03+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-121369", "first_seen_at": "2026-11-10T20:46:04+00:00"}]
exploit_sources: []
---

# Arista EOS: link-layer traffic can exhaust CPU and memory, forcing a reboot

Link for people: https://infrastack.ai/live/CVE-2026-121369 (this .md is for agents)

On Arista EOS switches under specific link configurations, an attacker with direct connectivity can drive CPU and memory use up sharply. The device becomes slow and may eventually reboot.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T20:46:04+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-121369

## From the sources

On affected platforms running Arista EOS under specific link configurations an attacker with direct connectivity to the system may cause system CPU and memory utilization to increase considerably leading to slow responsiveness and eventually may cause the system to reboot.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_