A critical memory corruption vulnerability in the Linux kernel mtk_eth_soc network driver can lead to system-wide denial of service.

The vulnerability exists in the mtk_eth_soc Ethernet driver where the mtk_poll_controller function incorrectly passes a net_device structure instead of the expected mtk_eth structure to mtk_handle_irq_rx. This type mismatch results in a kernel panic when the network polling controller is invoked by an unauthenticated attacker or system process.

The exploitability of this flaw is high, as it requires no authentication to trigger, and successful exploitation results in an immediate system crash. Given the CVSS score of 9.8, this represents a severe threat to business continuity, particularly for critical infrastructure or edge devices relying on the MediaTek Ethernet driver, where unexpected downtime could lead to significant operational disruption.

Immediate Action: Update the Linux kernel to version 6.12.103, 6.18.44, 7.1.8, or later to incorporate the corrected pointer handling.

Proactive Monitoring: Monitor system logs for kernel panic events or repeated network interface resets that may indicate an attempt to trigger this crash.

Compensating Controls: If patching is delayed, disable the CONFIG_NET_POLL_CONTROLLER kernel feature if it is not strictly required for network operations.

Public Exploit Available: Unknown

This vulnerability presents a high risk of service interruption due to its potential to trigger kernel panics. System administrators should prioritize testing and deploying the provided kernel patches to all affected Linux-based network infrastructure to prevent potential denial of service attacks.