A high-severity kernel memory access vulnerability in OpenWrt versions prior to 24.10.4 poses a significant risk of sandbox escape and unauthorized system control.

This vulnerability involves improper input validation, out-of-bounds read, and out-of-bounds write flaws within the ltq-ptm driver. A local attacker with low privileges can leverage these ioctl flaws to manipulate kernel memory, potentially bypassing security boundaries like ujail sandboxes.

The ability to read and write arbitrary kernel memory represents a critical security failure, as it allows an attacker to escalate privileges or compromise the underlying host system. While the vulnerability requires local access, successful exploitation could lead to full system takeover and persistent unauthorized access, severely damaging the integrity of the network appliance. Given the CVSS score of 7.9, this issue should be prioritized for remediation in environments where untrusted local users or sandboxed processes exist.

Immediate Action: Upgrade to OpenWrt version 24.10.4 or later to apply the necessary security patches to the ltq-ptm driver.

Proactive Monitoring: Monitor system logs for unauthorized attempts to access sensitive device drivers or unusual kernel-level activity originating from sandboxed services.

Compensating Controls: Since no workarounds exist, ensure that access to the device is strictly limited to authorized personnel and that any untrusted services are restricted using the most stringent available security profiles.

Public Exploit Available: No (exploit_available: false)

This vulnerability represents a significant risk to the integrity of OpenWrt-based devices, particularly those utilized in sensitive network routing roles. Administrators must prioritize the upgrade to version 24.10.4 to ensure the kernel memory access flaws are fully addressed. Failure to patch leaves devices susceptible to privilege escalation and sandbox breakout attempts by local attackers.