CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's handling of 6LoWPAN interfaces, where non-IPv6 packets can be queued for transmission, leading to the use of uninitialized data in the lowpan_addr_info structure. This flaw can result in unpredictable behavior or crashes, posing a significant risk to systems relying on 6LoWPAN for low-power wireless communication. Organizations utilizing Linux in IoT or low-power networking environments should prioritize applying the patch to mitigate potential exploitation.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit() The aoe driver (or similar) generates a non-IPv6 packet (e.g., ETH_P_AOE) and queues it for transmission via dev_queue_xmit() on a 6LoWPAN interface (configured by the user or test case). Since the packet is not IPv6, the 6LoWPAN header_ops->create function (lowpan_header_create or header_create) returns early without initializing the lowpan_addr_info structure in the skb headroom. In the transmit function (lowpan_xmit), the driver calls lowpan_header (or setup_header) which unconditionally copies and uses the lowpan_addr_info from the headroom, which contains uninitialized data. Fix this by dropping non IPv6 packets. A similar fix is needed in net/bluetooth/6lowpan.c bt_xmit().