A kernel-level vulnerability in the Linux stmmac driver allows unauthenticated remote attackers to trigger a system crash via network traffic.

This is a denial of service vulnerability caused by a failure to maintain proper memory alignment for IP headers in the RX DMA path. On architectures like ARM32, this misalignment triggers a fatal alignment exception when the kernel attempts to process received packets, resulting in an immediate system panic.

The primary risk associated with this vulnerability is an unauthenticated denial of service. Since an attacker can trigger the system panic simply by sending specific network traffic (such as an echo request), this flaw poses a significant threat to the availability of critical infrastructure and embedded systems running the affected Linux kernel. Given the CVSS score of 7.5, the vulnerability is classified as high severity due to the ease of exploitation and the potential for complete service disruption.

Immediate Action: Update the Linux kernel to version 6.18.52 or 7.2.6, or newer, where the NET_IP_ALIGN handling has been corrected.

Proactive Monitoring: Monitor system logs for alignment exceptions or unexpected kernel panics that correlate with spikes in incoming network traffic.

Compensating Controls: If patching is not immediately feasible, consider restricting network access to vulnerable devices at the network perimeter to filter potentially malformed packets, although this may not fully mitigate the risk of triggering the panic.

Public Exploit Available: No (exploit_available: false)

This vulnerability represents a significant risk to system availability, particularly for devices utilizing the stmmac network driver on ARM32 architectures. Security teams must prioritize applying the provided kernel patches to prevent potential service outages caused by remote triggered panics. Immediate testing and deployment of the updated kernel versions are strongly recommended to ensure system stability.