Memory Corruption in Linux Kernel 802.15.4 Interface Management

CVE-2024-57948

Summary

A vulnerability in the Linux kernel's handling of IEEE 802.15.4 network interfaces can lead to memory corruption. The issue arises when an IEEE 802.15.4 network interface is improperly deleted after the associated hardware device has been unregistered. Specifically, during the interface removal process, checks for local interfaces must be performed to prevent manipulation of a corrupted data list. Failure to do so can result in significant system instability and potential exploitation. This flaw has been reported and fixed in the Linux kernel, ensuring enhanced stability and security in future updates.

References