A critical vulnerability in the Linux kernel iwlwifi MLD driver exposes systems to potential remote code execution and denial of service due to improper handling of TSO segmentation.

This is a memory corruption vulnerability within the iwlwifi MLD driver triggered when AMSDU is disabled. An unauthenticated attacker can leverage this flaw to flood the transmission ring with micro-frames, resulting in a use-after-free condition in the TCP retransmit queue.

With a CVSS score of 9.8, this vulnerability represents a Critical risk to business operations. Exploitation could allow an unauthenticated attacker to execute arbitrary code or cause a kernel panic, leading to full system compromise or significant service downtime. Given the core nature of the Linux kernel, this flaw poses a severe threat to the availability and integrity of any infrastructure running vulnerable versions.

Immediate Action: Update the Linux kernel to version 6.18.34, 7.0.11, or newer as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel panics or unexplained crashes related to the iwlwifi driver, and implement network-level anomaly detection to identify unusual traffic patterns associated with wireless interface drivers.

Compensating Controls: While a direct kernel update is the only effective patch, organizations can limit exposure by disabling vulnerable wireless hardware or implementing strict network segmentation to restrict access to affected devices.

Public Exploit Available: No confirmed public exploit (weaponized or otherwise) is currently available for this vulnerability.

Due to the critical severity and the potential for remote code execution, organizations should prioritize patching their Linux kernel environments immediately. Verify your current kernel version and apply the recommended updates to version 6.18.34 or 7.0.11 to mitigate the risk of system instability and unauthorized access.