A critical vulnerability in the Linux kernel Cortina Ethernet driver could allow an unauthenticated attacker to trigger memory corruption or system compromise.

This is a memory management flaw occurring in the gmac_rx function of the Cortina Ethernet driver. The vulnerability arises because the fragment counter is incorrectly reset between NAPI poll invocations when a ring buffer is emptied, allowing for incomplete packet assembly and subsequent memory state corruption.

The vulnerability carries a CVSS score of 9.8, indicating a critical severity level. An unauthenticated attacker can exploit this flaw to potentially achieve remote code execution, cause a kernel panic resulting in denial of service, or gain unauthorized access to system memory, leading to severe data compromise and operational downtime.

Immediate Action: Update the Linux kernel to version 5.10.258, 5.15.209, 6.1.175, 6.6.142, or later versions where the fix has been backported.

Proactive Monitoring: Monitor system logs for kernel oops, tracebacks, or recurring network interface restarts that may indicate triggered memory corruption events.

Compensating Controls: Ensure that network traffic originating from untrusted sources is restricted via firewalls, and utilize kernel hardening features such as KASLR or module signing to reduce the likelihood of successful exploitation.

Public Exploit Available: No

Given the critical nature of this kernel vulnerability and its high CVSS score, organizations running affected Linux kernels should prioritize patching as part of their next maintenance cycle. System administrators must ensure that the specific fixed versions or later are deployed across all production environments to mitigate the risk of remote compromise.