An improper input validation flaw in the Linux kernel TI am65-cpsw-nuss driver could allow an unauthenticated attacker to cause a system crash, posing a significant availability risk.

The vulnerability exists in the packet reception path where the driver incorrectly handles 16-bit Source Tags. By failing to mask the upper 8-bits of the tag, the driver uses an invalid port ID, leading to out-of-bounds memory access and a kernel panic.

The vulnerability carries a CVSS score of 9.8, reflecting its potential to cause a complete denial of service for critical infrastructure components. Because the flaw is reachable via network traffic, it could lead to widespread system instability, requiring manual intervention to restore services. This creates a high risk of operational downtime for environments utilizing the affected TI hardware.

Immediate Action: Update the Linux kernel to the patched versions (5.10.266, 5.15.217, 6.1.184, or later) provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel panic events and memory access errors that may indicate exploitation attempts against the network driver.

Compensating Controls: Ensure that network traffic is restricted via hardware firewalls or VLAN segmentation to limit exposure of the affected interface to untrusted sources.

Public Exploit Available: Unknown

Given the critical severity and the potential for a full system crash, organizations should prioritize testing and deploying the provided kernel patches. If immediate patching is not feasible, restrict network access to the affected hardware interfaces to mitigate the risk of remote triggering until updates can be applied.