A critical integer overflow vulnerability in the Linux kernel IPv6 RPL handling can lead to memory corruption and potential remote code execution by unauthenticated attackers.

The function ipv6_rpl_srh_decompress contains an integer overflow flaw when calculating the header length of Routing Protocol for Low-Power and Lossy Networks (RPL) packets. An unauthenticated remote attacker can trigger this overflow by sending a specially crafted IPv6 packet, causing the kernel to write data out-of-bounds and corrupt adjacent memory.

The vulnerability carries a CVSS score of 9.8, reflecting its potential for full system compromise. Successful exploitation allows an attacker to achieve remote code execution, leading to total loss of confidentiality, integrity, and availability of the affected system. This poses a severe risk to any infrastructure relying on IPv6 routing, as it allows for unauthenticated exploitation over the network.

Immediate Action: Apply the latest kernel security updates provided by your distribution vendor, specifically ensuring the kernel is updated to at least version 5.10.259, 5.15.210, 6.1.176, or 6.6.143.

Proactive Monitoring: Monitor network traffic for malformed IPv6 packets or unusual kernel panic logs that may indicate attempts to trigger memory corruption within the RPL stack.

Compensating Controls: If immediate patching is not feasible, disable IPv6 RPL support if it is not required for network operations, or utilize a network-level firewall to drop suspicious or malformed IPv6 packets.

Public Exploit Available: No

Given the critical severity of this kernel-level vulnerability and the potential for unauthenticated remote code execution, immediate action is required. Organizations should prioritize patching their Linux environments according to their vendor's security update schedule to eliminate this attack vector.