Threats tagged 'ghsa-mh2g-wr94-hfmw'

A vulnerability in the Linux kernel's ieee802154 6lowpan subsystem allows a NULL pointer dereference via a crafted RTM_NEWLINK request. This occurs because the lowpan_newlink() function dereferences a pointer without verifying its initialization when a TUN device changes its link-layer type to ARPHRD_IEEE802154. This issue has been resolved by rejecting devices without the required ieee802154_ptr. The vulnerability affects specific linux-aws kernel versions.