Critical Vulnerability Resolved in Linux Kernel's IEEE 802.15.4 Interface

What changed

The Linux kernel has patched a vulnerability identified as CVE-2024-57948, which pertains to the mac802154 subsystem. This flaw involved improper handling of local interfaces during the deletion of the sdata list, potentially leading to system instability.

The issue was reported by syzkaller, highlighting a corrupted list scenario in the ieee802154_if_remove function. The fix ensures that checks for local interfaces are performed before attempting to delete the associated network interface.

Who is affected

Various products and systems utilizing the Linux kernel's IEEE 802.15.4 capabilities are at risk from this vulnerability. The following groups and vendors should take note of the resolution:

Manufacturers of IoT devices leveraging IEEE 802.15.4 technology, developers maintaining Linux-based systems, and organizations relying on wireless sensor networks are particularly impacted.

• IoT device manufacturers using Linux kernel for their products.
• Developers of applications that rely on IEEE 802.15.4 network interfaces.
• Organizations implementing wireless sensor networks based on Linux systems.

What to do

Users and administrators of affected systems are advised to update their Linux kernel to the latest version where this vulnerability has been addressed. Regular patch management practices should be observed to mitigate potential risks.

Additionally, organizations should conduct a thorough assessment of their network configurations and ensure that all components are compliant with the latest security standards.

• Update the Linux kernel to the patched version addressing CVE-2024-57948.
• Review and enhance network security policies to include regular updates.
• Conduct vulnerability assessments on systems utilizing IEEE 802.15.4 interfaces.