A memory safety flaw in the Linux mac802154 wireless subsystem could allow an adjacent attacker to trigger memory corruption or system crashes.

The vulnerability resides in the mac802154 llsec implementation. It performs in-place cryptographic transformations on network packets without using skb_cow_data(), which can lead to memory corruption when the underlying buffer is shared or read-only.

An attacker within radio range (adjacent network) could potentially exploit this to cause a denial of service or, in specific configurations, execute arbitrary code. Given the CVSS score of 8.8, this vulnerability is critical for systems using IEEE 802.15.4 wireless protocols, such as IoT gateways and industrial control sensors.

Immediate Action: Update the Linux kernel to version 5.10.260, 5.15.211, 6.1.177, 6.6.144, or later.

Proactive Monitoring: Monitor for kernel panics or unexplained memory errors in systems that utilize mac802154 drivers.

Compensating Controls: If patching is delayed, disable wireless interfaces utilizing the mac802154 protocol if they are not strictly required for business operations.

Public Exploit Available: No (exploit_available: false)

This vulnerability represents a significant risk for wireless-enabled Linux hardware. Organizations should prioritize updating affected kernels to prevent memory corruption attacks and maintain the security of wireless communication channels.