Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's mac802154 subsystem allows for improper handling of local interfaces, leading to a corrupted list when an IEEE 802.15.4 network interface is removed. This issue arises after unregistering a related hardware device, creating a race condition where the interface can be deleted before the unregistration process is fully completed. The vulnerability has been addressed by adding a check for local interfaces before deleting the associated data list.
Exploitation of this vulnerability can lead to a kernel crash, as indicated by a reported 'invalid opcode' error, which is typically associated with executing an incorrect or undefined instruction.
The vulnerability can be reproduced by using the syzkaller fuzzing tool, which can trigger the race condition by unregistering an IEEE 802.15.4 hardware device while simultaneously removing the associated network interface. This process can corrupt the internal list management of the kernel, leading to a crash.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.