A high-severity memory corruption vulnerability in the Linux kernel mac80211 subsystem could allow an adjacent attacker to crash the system or achieve arbitrary code execution.

The vulnerability exists in the mac80211 subsystem where ieee80211_invoke_fast_rx reads RX status from the socket buffer control block, which is subsequently overwritten by ieee80211_rx_mesh_data. This race condition allows for memory corruption and requires an attacker to be within the local network range (adjacent access).

The ability to trigger memory corruption via the network stack poses a severe risk to network-connected devices. Given the CVSS score of 8.8, this vulnerability could be exploited to compromise the integrity and availability of wireless-enabled Linux infrastructure, potentially leading to full system compromise.

Immediate Action: Update the Linux kernel to version 7.0.11 or later, or apply the relevant distribution-provided security patches.

Proactive Monitoring: Monitor network-related kernel events and crash reports, specifically those involving wireless mesh networking drivers.

Compensating Controls: If patching is delayed, minimize the exposure of mesh-enabled wireless interfaces to untrusted networks using network segmentation.

Public Exploit Available: false

Given the potential for remote-adjacent compromise of the kernel, immediate remediation is required. Organizations utilizing wireless mesh networking on Linux should verify their kernel versions and apply the necessary updates to mitigate this high-risk memory safety flaw.