The Linux kernel's ieee802154 legacy netlink family operations for dumping LLSEC entries (including LLSEC_LIST_KEY) did not set permission flags, allowing any local user with access to AF_NETLINK/NETLINK_GENERIC to retrieve raw 16-byte AES-128 LLSEC keys from WPAN devices. This exposure compromises link-layer security confidentiality and authenticity because the same AES key is used for encryption and authentication. The fix involved creating IEEE802154_DUMP_PRIV(), which sets the GENL_ADMIN_PERM flag, restricting access to these sensitive dumps to privileged users only, while retaining unprivileged access for non-sensitive information.

Any local user without special capabilities could extract raw AES-128 LLSEC keys from the kernel keytable on WPAN devices, compromising the confidentiality and authenticity of 802.15.4 LLSEC links. This undermines the security of encrypted and authenticated wireless communications on affected devices.

A fix has been implemented that restricts access to LLSEC key dumps by requiring administrative permissions via the GENL_ADMIN_PERM flag. Users should update their Linux kernel to a version that includes this fix. Since this is a kernel vulnerability, applying the official kernel patch or upgrading to a fixed kernel version is the recommended remediation.