A local vulnerability in the Linux kernel 6LoWPAN subsystem allows attackers with low privileges to compromise system confidentiality, integrity, and availability.

This is an improper handling of uninitialized memory vulnerability within the ieee802154 6lowpan transmission logic, requiring low local privileges and no user interaction.

A successful exploit allows a local authenticated user to compromise the affected host entirely, potentially leading to unauthorized data access, system modification, or complete denial of service. While the CVSS score is 7.8, representing a high-severity local threat, the potential for arbitrary code execution and system-wide impact makes timely remediation critical for multi-tenant or shared environments.

Immediate Action: Update the Linux kernel to the latest patched stable versions, such as 5.10.259, 5.15.210, 6.1.176, 6.6.143, or later.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or unauthorized local execution of custom network traffic generators.

Compensating Controls: Restrict local shell access and apply strict user permission boundaries to prevent unauthorized users from interacting with 6LoWPAN network interfaces.

Public Exploit Available: No

Administrators managing systems utilizing 6LoWPAN functionality must prioritize applying the latest kernel updates. Because this vulnerability requires local access, securing user privileges and enforcing principle of least privilege serves as a strong secondary defense while patches are deployed.