A critical vulnerability in the Linux kernel mac802154 subsystem allows an unauthenticated remote attacker to cause a denial of service via a crafted radio frame.

The flaw resides in the llsec_do_decrypt_auth function, where an unchecked signed to unsigned conversion during associated data length calculation leads to an out of bounds read. This vulnerability is remotely exploitable by an unauthenticated attacker within radio range, triggering a general protection fault.

This vulnerability carries a CVSS score of 8.8, indicating high severity. Successful exploitation results in a kernel panic and system denial of service, which can disrupt critical infrastructure or communication services relying on the 802.15.4 stack, leading to significant operational downtime.

Immediate Action: Apply the vendor patches by updating the Linux kernel to version 5.10.265, 5.15.216, 6.1.183, 6.6.148, or a later stable release.

Proactive Monitoring: Monitor system logs for kernel oops or general protection faults specifically associated with the mac802154 driver.

Compensating Controls: If patching is not immediately feasible, isolate systems using 802.15.4 radios from untrusted network segments to limit exposure to remote attackers.

Public Exploit Available: No

Given the potential for remote denial of service, administrators should prioritize updating kernel packages on all affected devices. Apply the provided stable kernel patches as soon as possible to prevent potential service disruptions.