A vulnerability in the Linux kernel iwlwifi driver allows unauthenticated adjacent attackers to trigger memory corruption via improper TX_CMD response validation.

The vulnerability exists in the iwlwifi wireless driver, specifically within the TX_CMD response parsing logic. An unauthenticated attacker positioned on the adjacent network can provide a maliciously crafted TX_CMD response that bypasses existing length checks, leading to improper memory access during payload parsing.

The CVSS score of 8.8 indicates a high severity risk that could lead to significant system instability, denial of service, or potential privilege escalation. Successful exploitation allows an attacker to compromise the integrity and availability of the affected wireless subsystem, which may impact critical network infrastructure and result in unauthorized access to kernel memory space.

Immediate Action: Update the Linux kernel to version 6.12.111, 6.18.53, or later, as these versions contain the necessary validation logic to correctly handle TX_CMD response layouts.

Proactive Monitoring: Monitor system logs for kernel panics, segmentation faults, or dmesg output related to the iwlwifi driver, which may indicate attempted exploitation.

Compensating Controls: Restrict access to the wireless network to trusted devices and implement network segmentation to minimize the impact of potential adjacent network attacks.

Public Exploit Available: No — no confirmed public exploit exists.

Given the high CVSS score and the nature of kernel-level vulnerabilities, immediate patching is advised for all systems utilizing the affected Linux kernel versions. Administrators should prioritize updating wireless infrastructure and endpoints to the specified fixed versions to eliminate the underlying memory validation flaw.