OpenBSD WireGuard Traffic Handling Vulnerability Leading to Kernel Crash

A vulnerability exists in OpenBSD versions 7.6 prior to errata 006 and 7.5 prior to errata 015, where traffic sent over the WireGuard interface (wg(4)) could cause a kernel crash. This issue arises from improper handling of network packet buffers, which can lead to a system crash under certain conditions.

Impact

Exploitation of this vulnerability causes a kernel crash, leading to a system outage.

Remediation

Users can apply the OpenBSD 7.5 errata 015 or OpenBSD 7.6 errata 006, both released on January 10, 2025. Instructions for applying this patch are available on the OpenBSD website.