Linux Kernel IEEE 802.15.4 6LoWPAN Interface Non-IPv6 Packet Handling Vulnerability

A vulnerability exists in the Linux kernel's handling of packets on 6LoWPAN interfaces. The issue arises when the AoE driver (or similar) sends non-IPv6 packets, such as those carrying the AoE Ethernet protocol, through the 6LoWPAN interface. The 6LoWPAN header creation process fails to properly initialize the necessary address information for these packets, leading to the transmission of data with uninitialized fields. This vulnerability can be exploited by queuing non-IPv6 packets for transmission on a 6LoWPAN interface, either manually or through automated testing.

Impact

Exploitation of this vulnerability allows for the transmission of packets with uninitialized data, which could lead to undefined behavior or memory corruption on the receiving end.

Reproduction

To reproduce this vulnerability, configure a 6LoWPAN interface on a Linux system. Then, use a driver that can send non-IPv6 packets, such as an AoE driver, to queue these packets for transmission over the 6LoWPAN interface. The absence of proper IPv6 packet handling will result in the transmission of data with uninitialized address information.

Remediation

The vulnerability has been addressed in the Linux kernel by modifying the 6LoWPAN transmission function to discard non-IPv6 packets. Users should upgrade to the latest version of the Linux kernel where this fix has been applied.