SB20260812419 - Out-of-bounds read in Linux kernel mac802154
Published: August 12, 2026
Security Bulletin ID
SB20260812419
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Adjecent network
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Out-of-bounds read (CVE-ID: CVE-2026-68125)
CWE-ID: CWE-125 - Out-of-bounds read
CVSSv4: 7.1 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a remote attacker to cause a denial of service.
The vulnerability exists due to an out-of-bounds read in llsec_do_decrypt_auth() when processing crafted IEEE 802.15.4 secured frames with payloads shorter than the authentication tag. A remote attacker can send a specially crafted frame to cause a denial of service.
The crafted frame can reach the vulnerable path from an IEEE 802.15.4 peer in radio range.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/5bbf0cd9b6a7076af86c75e87e180099be2e11ae
- https://git.kernel.org/stable/c/de80808f37d99c6dc67bb6f97eea00c8f57a8821
- https://git.kernel.org/stable/c/e09e0301d616c1ef38a5e64e8e4326fd39df13cc
- https://git.kernel.org/stable/c/f20dedce0429b293d4bad604e0d3f65d8ac96c83
- https://git.kernel.org/stable/c/fd3a3f28ed60c6af4b2a39933b151d6b27842c3b