The recommended resolution is to upgrade to a remediated software version at your earliest convenience. Arista recommends customers move to the latest version of each release that contains all the fixes listed below. For more information about upgrading see: EOS User Manual: Upgrades and Downgrades https://www.arista.com/en/um-eos/eos-upgrades-and-downgrades CVE-2025-8872 has been fixed in the following releases: * 4.34.2F and later releases in the 4.34.x train * 4.33.5M and later releases in the 4.33.x train * 4.32.8M and later releases in the 4.32.x train * 4.31.9M and later releases in the 4.31.x train

In order to be vulnerable to CVE-2025-8872, the following condition must be met: The OSFPv3 protocol must be configured in either the default or non default vrf and at least one neighbor must be present switch>show ospfv3 OSPFv3 address-family ipv6 Routing Process "ospfv3" with ID 192.0.2.0 and Instance 0 VRF default FIPS mode disabled Maximum number of LSAs allowed 0 Exceed action disable LSA limit for warning message 75% Disabled-time 5 minutes, clear timeout 5 minutes Incident count 0, incident count limit 5 It is an autonomous system boundary router and is not an area border router Minimum LSA arrival interval 1000 msecs Initial LSA throttle delay 1000 msecs Minimum hold time for LSA throttle 5000 msecs Maximum wait time for LSA throttle 5000 msecs It has 1 fully adjacent neighbors Number of areas in this router is 1. 1 normal, 0 stub, 0 nssa Number of LSAs 8 Initial SPF schedule delay 0 msecs Minimum hold time between two consecutive SPFs 5000 msecs Current hold time between two consecutive SPFs 5000 msecs Maximum wait time between two consecutive SPFs 5000 msecs SPF algorithm last executed 00:04:52 ago No scheduled SPF Adjacency exchange-start threshold is 20 Maximum number of next-hops supported in ECMP is 128 Number of backbone neighbors is 0 Graceful-restart is not configured Graceful-restart-helper mode is enabled Area 0.0.0.0 Number of interface in this area is 1 It is a normal area SPF algorithm executed 6 times switch>show ospfv3 neighbor OSPFv3 address-family ipv6 Routing Process "ospfv3" Instance 0 VRF default Neighbor 192.0.3.0 VRF default priority is 1, state is Full In area 0.0.0.0 interface Ethernet4 Adjacency was established 00:00:49 ago Current state was established 00:00:49 ago DR is 3.3.3.3 BDR is 2.2.2.2 Options is E R V6 Dead timer is due in 29 seconds Graceful-restart-helper mode is Inactive Graceful-restart attempts: 0   If OSFPv3 is not configured there is no exposure to this issue and the show command will not produce any output switch>show ospfv3 switch>show ospfv3 neighbor

There is no workaround to mitigate the issue.