A vulnerability in the Linux kernel mac80211 subsystem could allow an unauthenticated attacker on the local network to cause a system crash or potentially achieve arbitrary code execution.

The vulnerability exists in the ieee80211_process_rx_twt_action function, which fails to properly validate the length of individual TWT parameters before passing them to driver callbacks. This allows an unauthenticated attacker to send a specially crafted S1G TWT setup frame, leading to memory corruption during driver processing.

The CVSS score of 8.8 reflects the high risk posed by this vulnerability, as it allows unauthenticated, local network-based access to trigger severe memory corruption. Successful exploitation could lead to full system compromise, including the loss of confidentiality, integrity, and availability of sensitive data processed by the affected wireless interface.

Immediate Action: Update the Linux kernel to version 5.15.216, 6.1.183, 6.6.151, 6.12.103, or later, as provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops, segmentation faults, or unusual wireless driver activity that may indicate attempts to exploit memory corruption.

Compensating Controls: Restrict access to the wireless network environment and employ network segmentation to limit the exposure of vulnerable wireless interfaces to untrusted traffic.

Public Exploit Available: Unknown

Given the high severity of this kernel-level memory corruption flaw, organizations should prioritize patching affected Linux systems. Administrators must apply the provided kernel updates immediately to prevent potential remote code execution or system instability arising from malicious wireless frame injection.