Linux Kernel mac802154 Local Interface Check Vulnerability Leading to List Corruption

Vulnerability

A vulnerability in the Linux kernel's mac802154 subsystem allows for improper handling of local interfaces, leading to a corrupted list when an IEEE 802.15.4 network interface is removed. This issue arises after unregistering a related hardware device, creating a race condition where the interface can be deleted before the unregistration process is fully completed. The vulnerability has been addressed by adding a check for local interfaces before deleting the associated data list.

Impact

Exploitation of this vulnerability can lead to a kernel crash, as indicated by a reported 'invalid opcode' error, which is typically associated with executing an incorrect or undefined instruction.

Reproduction

The vulnerability can be reproduced by using the syzkaller fuzzing tool, which can trigger the race condition by unregistering an IEEE 802.15.4 hardware device while simultaneously removing the associated network interface. This process can corrupt the internal list management of the kernel, leading to a crash.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.3
remediation
0.0
relevance
0.0
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.